last executing test programs: 8.722498086s ago: executing program 2 (id=1700): openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@local, 0x300}) 8.677345684s ago: executing program 2 (id=1701): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x21ac, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x217c, 0x2, [@TCA_CGROUP_ACT={0x1558, 0x1, [@m_ct={0x114, 0x17, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}, @TCA_CT_LABELS_MASK={0x14, 0x8, "c226e0a365afe253fde319c178165f54"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00'}, @TCA_CT_LABELS={0x14, 0x7, "3a33f924f704656ed321af4bd1c8131d"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1}]}, {0x89, 0x6, "92ff5bcfcac9ccc75e15cd8b35ae39eaebb7b2e0d500990bd0ee46f5bc57e1027d482f4568be6e6ab843c1649b1db99fe13b37b3d9626376e28d82def6bc00553a8287215e3ff3279818c212b24ae887b9e5c895bc82bbd4bcf7009700bb883df20f32770945b0377e993387fa12a5341d8a3d3abfd28f486a723a4187e93cb78e57f55270"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0xf4, 0x7, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xd, 0x7, 0x2, 0x10001}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3b, 0x40, 0x10000000, 0x1, 0x80000000}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xbd3, 0x4, 0x2, 0x6}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3, 0x10000000, 0x1, 0x5}, 0x3}}]}, {0x45, 0x6, "03024ac9dd768a57bdcf488283227a8958a808b5b411ec06faef0d203a6b74490875763662d1311f6706cfb0991850a7780ed018424c5f7e94a50ec4247523fcbc"}, {0xc, 0x7, {0x0, 0x197978fbe3cb039f}}, {0xc, 0x8, {0x2}}}}, @m_xt={0xb8, 0x12, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x40, 0x6, {0xfdc, 'security\x00', 0x80, 0x5, "c27391ef57f629c6c09d6c71e57e8e5ffea291218011"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x40, 0x6, "d2fff9b9c0242c35cd389431c398a708b506e1569fb677a0e4ac9c73e62978c84edbc94dcd285a554bdc76442b0d910131cb0a9bddfd8c15e6d300b7"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x114, 0x12, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xbe287}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x0, 0x2, 0x2, 0x100}, 0x1}}]}, {0xbc, 0x6, "b3e4f145d9cab2f60b9139e3aeb6a44f65ca6d68c3abe475f59385487fc0144409120b2c91095916c0ec5bf617f12a86360c9f19ca310b47004f58e541bcb5610cd4ea898bde84d0f82be7ed39725ecb8715b54993d022588e7e212cd984552ff7306720054865483686e2866be3d62bf90fd689354b08882c9141cefd354182c583aa759cf05d9bc30cb3f9d18754565d33605116d4bc0a73ec695d4a2a454ca0c958f9bc03394eafaa274e942c3104a99bc0413e1c24fb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0xd4, 0x5, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}]}, {0x9c, 0x6, "4832646befe5dce278045a562d8369863b1e158ee734fb037dc267cf3188813e8d155b5e370f4d571a7e7f55caa6d48316cdf1bdc9c88aba4075dd5db07060e571857447be6939564f4eec7949c6b156c573ce093d7899bb50f32cfd8fdae492d294ed5b0b3ff6b1f6c6bcf9eb3a78a4182b52f8b31b2df99bd834c38db25c52bce87acf848886faa97e2a9806efcf00f34a223276be6e68"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x10ac, 0x3, 0x0, 0x0, {{0x8}, {0x84, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x2f80}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xcd2, 0x5, 0x6d, 0xde836ffe}}}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x2}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_SKBMARK={0x8}]}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_CGROUP_POLICE={0xc1c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0xd196, 0x4, 0x9, 0x0, 0x1, 0x7f, 0x7fffffff, 0xfff, 0x7, 0x3, 0xffffffff, 0x3b, 0x80000001, 0x10, 0x10001, 0x0, 0x9, 0x3, 0x6, 0x2, 0x4, 0x6, 0x8, 0x3, 0x9, 0x6b, 0x8, 0x9, 0x5, 0x9, 0xc, 0xb, 0x1, 0x0, 0x7fff, 0x9, 0x80000000, 0xffffffff, 0x5, 0x84d7, 0x9, 0xfffffff5, 0xfffffffa, 0xba7, 0x3, 0x3, 0xfffffffa, 0x1, 0x8, 0xb, 0x5, 0xfff, 0x2, 0x0, 0x9, 0x376, 0x4, 0x6, 0x0, 0xf3, 0x2, 0x8001, 0x6, 0x2, 0x7, 0x9, 0x4, 0x7fffffff, 0xf865, 0x0, 0x200, 0x8, 0x5, 0xfffffffd, 0x2, 0x3d6a0000, 0xad, 0x7, 0x10000, 0x2, 0x492, 0x5, 0x1, 0x1, 0x101, 0x7, 0x81, 0x3, 0x2, 0x1, 0x8, 0x7, 0xd, 0xb, 0x1000, 0xa, 0x127, 0x8, 0x46, 0xffffffff, 0xffff, 0x8, 0x101, 0x2, 0x9, 0x7, 0x4d4, 0x8, 0x0, 0xe, 0x8, 0x4, 0x800, 0x6, 0xfffffff7, 0x0, 0x1, 0x64f, 0x8, 0x2, 0x7ff, 0x0, 0x3, 0x1ba, 0x7, 0x7, 0x5, 0x6, 0x10000, 0x7fffffff, 0x1, 0x80000001, 0x2, 0x80000001, 0x6, 0x9, 0x9, 0xa2, 0x5, 0x7, 0x4, 0x89, 0x8, 0xc, 0x6, 0x0, 0x3625, 0xffffff20, 0x2, 0xffffffff, 0x6, 0x8, 0xffffffc0, 0x8, 0x8, 0x2, 0x8, 0x7, 0x6, 0x9d4, 0x1, 0x7f, 0x5, 0x0, 0xffff, 0x100, 0x9, 0x400, 0xf, 0x8, 0x5, 0x0, 0x9, 0x9, 0xa, 0xff, 0x6, 0xfff, 0x3ff, 0x3, 0x2df1, 0x6, 0x6, 0x100, 0x0, 0xfffff7a3, 0x10000, 0xffffffff, 0x3e, 0x9, 0x3, 0x8, 0x5, 0x6, 0x7f, 0xb85, 0x7fffffff, 0x7, 0x10, 0x10, 0x200, 0x2, 0x400, 0x0, 0x1, 0xba0, 0x8, 0x80000001, 0xe22, 0x86b, 0xe, 0x9, 0x8000000, 0x0, 0x7f, 0x7, 0xfe3f, 0x9, 0x7cb1, 0xe, 0x82ba, 0x9, 0x5, 0x5, 0x2000, 0x46d2, 0xffffffcd, 0xfd0d, 0x1, 0x4d0a, 0x3ff, 0x8, 0x2, 0x0, 0x4, 0xffffffff, 0x5, 0x1, 0x6, 0x9, 0x5, 0x8, 0xfffffff9, 0x4, 0x1ff, 0x6, 0xffffffff, 0x6, 0x655, 0x2, 0x0, 0x7, 0x9a5, 0x5, 0x800, 0xff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xa, 0x9, 0x7ff, 0x3e7f, 0x1, 0x7, 0x4, 0x0, 0x7, 0x3b9, 0x6, 0x4, 0x8, 0x1, 0x68, 0x5, 0x6, 0xfffffff7, 0xdc3, 0x1, 0x1000, 0x5, 0x8, 0x44, 0x3, 0x9, 0xffffff81, 0x8, 0x6, 0x7, 0x8, 0x200, 0x4, 0xfffffffa, 0x0, 0x9, 0x6, 0x80, 0x5, 0x1, 0x1, 0xeb, 0x1ff, 0x4, 0xc, 0x5, 0xb, 0x3, 0x9, 0x7f, 0xdfef, 0x1000, 0x800, 0x4f5, 0x7, 0x8001, 0x9, 0x5967, 0x3, 0x5cb, 0x4, 0x7, 0x8, 0x7, 0x1, 0x80, 0x861, 0x1, 0x1, 0x1ff, 0xb, 0x300, 0x7ff, 0x5, 0x9, 0xa, 0xc71, 0xe, 0x8001, 0x0, 0x400, 0x0, 0xfffffff9, 0xffffffc0, 0xfff, 0xffffffff, 0x7, 0x9, 0x2, 0x2, 0x51c6, 0x2, 0x2, 0x0, 0x2, 0x1, 0x1, 0x79b, 0x3, 0x8, 0xd, 0x3, 0x7, 0x101, 0x2b2, 0x2ce9, 0x7, 0x1b000000, 0x6, 0x8, 0x7, 0x3, 0x2, 0x0, 0x8, 0xfffffffc, 0x27, 0x2, 0x101, 0x0, 0xff8, 0x2, 0x67, 0x8000, 0x89, 0x81, 0x5, 0x8, 0x10000, 0x0, 0x5, 0x8, 0x5, 0x7, 0xcc, 0xeff, 0x2, 0x3, 0x0, 0x40, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x8, 0xb6a, 0x6, 0x6, 0x5bda, 0x0, 0x0, 0x0, 0x2, 0x7, 0x80, 0xd1, 0x7, 0x0, 0x0, 0x100, 0x0, 0x0, 0x6a27, 0x28c3, 0x1ff, 0xb92, 0x80000000, 0x9, 0xa33, 0x40, 0x10001, 0x6, 0xf9, 0x80000001, 0x6e2f, 0x0, 0x1ff, 0x3e, 0xe, 0x0, 0x4, 0x1, 0x400, 0xe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0xff, 0x200, 0x0, 0x32bb, 0xd9bf, 0xd185, 0x0, 0x8, 0x4, 0x0, 0x3, 0x0, 0x3ff, 0x5, 0x0, 0x2581, 0x1ff, 0xfff, 0x8000, 0x1, 0x6, 0x1, 0x4, 0x9, 0x0, 0x34d, 0x9, 0x7, 0x3, 0x6, 0x0, 0xf98b, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x3, 0x0, 0x0, 0x2, 0x616, 0x918d, 0x1, 0x0, 0x1, 0x1, 0x5, 0x0, 0x0, 0x12000, 0x0, 0xe, 0x8, 0x0, 0x0, 0x2, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x9, 0x1, 0x0, 0xc60, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x5, 0x7fff, 0x58c, 0xfff, 0x2, 0x1, 0x5, 0x1, 0x211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xb6, 0x8001, 0xb1a, 0x7f, 0x9, 0x0, 0x2, 0xc686, 0xa77a, 0xfffffffe, 0x54ff, 0x7ff, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7f, 0x0, 0xfffffff8, 0x5, 0x7, 0x0, 0xff, 0x101, 0xffffffc2, 0x6, 0x2, 0x3, 0x6, 0x0, 0x7, 0x81, 0x9, 0x0, 0x8, 0x8, 0xffffffbf, 0x6, 0x1, 0x0, 0xa6fb, 0x200, 0x1f, 0x7, 0x6, 0x1, 0x800, 0x5, 0x2, 0x1, 0x9, 0xa3c, 0x0, 0x0, 0xa, 0xe, 0x3, 0x0, 0x0, 0x5, 0x3, 0xe090, 0x5, 0x7, 0x6, 0x2, 0x2, 0x2, 0xea, 0x215, 0x0, 0xff, 0x1, 0xf1, 0x557, 0x10000, 0x0, 0x2, 0x0, 0xfffffffc, 0x4, 0x7, 0x0, 0x2, 0x0, 0x6, 0x4, 0x4, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x10001, 0x4, 0x0, 0xac, 0x4, 0x7, 0x0, 0x65, 0x7, 0x9, 0x1, 0x9, 0xc324, 0x5, 0x3cc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3ff, 0x1c, 0x4, 0x0, 0x80000001, 0x7f1, 0x7fffffff, 0x2, 0x0, 0x80000000, 0xeb, 0x101, 0x3, 0x0, 0x3, 0x50, 0xfffeffff, 0x2, 0x7fff, 0x400, 0x9, 0x8, 0x5, 0x0, 0xfffffffe, 0x0, 0x6, 0x2, 0x20000, 0x0, 0x40, 0xfffffffd, 0x9, 0x3718, 0x200, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3a4, 0x0, 0x9, 0x6, 0x1d3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x5, 0xc33, 0xc7e7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x7, 0x80, 0x8, 0x42, 0xfffffff0, 0x649ce348, 0x8, 0x1ff, 0x3ff, 0x0, 0x77b, 0x7, 0x101, 0x6, 0x6, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x145e, 0x80, 0x26fc, 0xbc4, 0x5, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc, 0x8, 0x4, 0x800]}]}, @TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x21ac}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.620955015s ago: executing program 2 (id=1702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10002, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x9}}]}, {0x4}, {0xffffffffffffffe0}, {0xc}}}]}]}, 0x60}}, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000040)={0x3, 0x0, 0x1ff, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5b1d75cb3ed028481b97f44f556e2e89a98c57d702290989961424b3761e66f3"}) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0xc}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000480)={0x80001, 0x3}, 0x8) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x14) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="533a4a9c431800003d380101000000000000", @ANYRES16=r5, @ANYBLOB="040029bd7000fcdbdf252100000004008700"], 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x4) r8 = socket$kcm(0x10, 0x2, 0x4) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmmsg$inet(r9, &(0x7f0000002d00)=[{{&(0x7f00000002c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001780)=[{&(0x7f00000004c0)="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", 0xe00}, {&(0x7f00000014c0)="68f7c3b65181be1c53da96aff1e4ffa16bcf59987dfd0c19979b487cb27eeb9f5cf2cadec4bf9285c4c4507e4f48f4d7ed70a44c76cfce078c6723b05aab627c1b68838cb22b1198e4501f1658d79c8464d5d94dbe35e9eb70f3fa0c9d0df7ee450f2764eeb97b044a61863d5db177f6f51e34aa3d592e34ce09dd9946c3b4c9f6", 0x81}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000001b80)=[{0x0}, {&(0x7f00000018c0)}, {0x0}, {&(0x7f00000019c0)="9dda2a41f157f78dd3a59aeb0cc6547c208b4d3525b69cd12dba3d9680a68defc3cb10badd224751641f6ca199fc782bd61a3ecd13cdddb762feff338d833f015e311e3be49a842e05f2a9066eb54ef8684d3d33c53a799c899a8cc62ff8bb95d079891e9bfcb381", 0x68}, {&(0x7f0000001a40)}, {&(0x7f0000001b00)}], 0x6, &(0x7f0000001d00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x200}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x53}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}], 0xd8}}, {{&(0x7f0000001e00)={0x2, 0x4e22, @private=0xa010104}, 0x10, &(0x7f0000002100)=[{0x0}], 0x1}}, {{&(0x7f0000002640)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000002680)}, {&(0x7f00000026c0)="8510cabf166edc2a6e8081a4a9e0204f8b77bae5ff7898348462f81dee6561526c966f058d5d511bd668c644d146a70d5bb9749c4bc3d0496f3dd131db221463ec3339afc55e5e8ad5b0995aa283265c4f4158b77d6f0327927504ff3009b0e95733bd30e477e97dc4bdf4c40ffcd028e070d012acc6a8da75c4964ff8915fe184186e3a2d7ffc32c65afb1d8138557b408ed93d5693db6091d1064edfbb22abb6a55620e0facb", 0xa7}, {0x0}, {&(0x7f0000002980)="ba4858ef98054c70d0215393b82abb5ebfbf52ed3477f10d237d3637c45b083b5fc1a1c8a341acfd64332ea841d369ea39cc6c8ba55f55", 0x37}], 0x4, &(0x7f0000002c00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xf}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x726}}, @ip_tos_u8={{0x11}}], 0x80}}], 0x4, 0x448c1) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x30044041) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000400020011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.425957994s ago: executing program 2 (id=1703): openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)="c5", 0x1, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$unlink(0x9, r0, r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4087, 0xff7}], 0x1, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000680)={0x8098f903, 0x0, "5d77c3defd75c9bd8354a99d4fb1d91e7427ce0f7bcfad5e9d03616e0ab7235f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x100]}) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="4319e2aabc1e4a13e696a7f0d7557242d86bf77f9c16bad3035548f5cdb5bc12d17a90b4063934ce295fa65c2323953d5e52a3ff4c543f094d35b793ab9f722d816203247e4fb54ca97d0053f1606f9fe21d35d3b25e2c3a713579039c1ea1f53aaeabd7b902297b5fd3dccd0b11db742f0e5a832b3adef3a6eae7952cbf3874ef323373b5d03e736994b6eef1e78e566d8c26a21a5e0896bc5b515603985946e75f93f7bd54adfdb387b992d26814248b9a22e770160dcb9694b89abd64650a", 0xc0, r0) keyctl$clear(0x7, r0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f904, 0x3}) ioctl$VIDIOC_DQEVENT(r7, 0x80885659, &(0x7f0000000440)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f00000002c0)={@local}) 7.41776818s ago: executing program 2 (id=1704): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, 0x0, 0x0}, 0x90) accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c, 0x0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c0c9a271971d60c250373ece89c53ebfabe609d7b67f5", 0x23, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 6.689552642s ago: executing program 4 (id=1708): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000", @ANYRES32=r0, @ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) 6.42263781s ago: executing program 2 (id=1710): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt(r2, 0x1, 0x1, &(0x7f0000000300)=""/237, &(0x7f0000000100)=0xed) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @loopback, @local}, "140022eb00000000"}}}}}, 0x0) r3 = dup(r1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x633, 0x0, 0x0, {{@in=@multicast2, @in6=@dev}, {@in6=@loopback, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x35075c}}]}, 0x144}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@multicast2, @in6=@dev}, {@in6=@loopback, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001740)=ANY=[@ANYBLOB="54010000100001000000000000000000ac1414aa000000000000000000000000fc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac141400000000006c000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480003006465666c617465"], 0x154}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 6.150922286s ago: executing program 1 (id=1711): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e240003000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x8, 0x80000001, 0x5, 0x7fffffff, 0x18, "941c4c81f53db0078fc6c005038462068a73c4"}) 5.889737573s ago: executing program 0 (id=1715): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d740"], 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$l2tp6(0xa, 0x2, 0x73) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 5.173990464s ago: executing program 4 (id=1717): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x6, 0x0, 0x4}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x0}) write$char_usb(r1, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r1, 0x4008c002, 0x0) 5.108122007s ago: executing program 1 (id=1718): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r3 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='smackfstransmute', &(0x7f0000000040)='u+\x1d\x00\x00.\x00', 0x0) 5.001167563s ago: executing program 1 (id=1719): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="e7feee", 0x3, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x4, 0x24, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085504, &(0x7f0000000400)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000ffec802866f183ab91b395423a0000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KDSIGACCEPT(r3, 0x5607, 0x38) read$FUSE(0xffffffffffffffff, &(0x7f0000000cc0)={0x2020}, 0x2020) getresgid(&(0x7f0000002d00), &(0x7f0000002d40), &(0x7f0000002d80)) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00"], 0x0) 3.642668721s ago: executing program 3 (id=1725): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) prlimit64(r2, 0x0, &(0x7f0000000040)={0x3, 0x1}, &(0x7f0000000080)) r3 = socket$kcm(0x2, 0x3, 0x106) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0x3f3f, 0x4) sendto$inet(r4, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000340)={0x0, 0xfffffffffffffe95, 0x0, 0x0, &(0x7f0000000640)=""/194, 0xffffffffffffff5b}, 0x40002000) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916ac3b4dafef92c", 0xffeb}], 0x1}, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ALPHA={0x8}, @TCA_PIE_LIMIT={0x8}]}}]}, 0x40}}, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 2.829645021s ago: executing program 0 (id=1726): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x20) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb, 0x1}, 0x20) accept4(r0, &(0x7f0000000100)=@caif=@dbg, &(0x7f0000000180)=0x80, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) socket$packet(0x11, 0x0, 0x300) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r2}}, 0x18) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) 2.828910625s ago: executing program 0 (id=1727): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14"], 0x78}}], 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x2a, 0xe, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xd1, &(0x7f0000000040)=0xd758, 0x4) setsockopt$MRT6_TABLE(r5, 0x29, 0xc8, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0xffffffcf, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xdb5070e3a21b4b14}, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000003c0), 0x12) write$cgroup_pid(r4, &(0x7f00000001c0), 0x74) 2.774560245s ago: executing program 3 (id=1728): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000001811", @ANYRES32=r0, @ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) 2.722438199s ago: executing program 0 (id=1729): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e240003000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x8, 0x80000001, 0x5, 0x7fffffff, 0x18, "941c4c81f53db0078fc6c005038462068a73c4"}) 2.049682545s ago: executing program 4 (id=1730): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@gettaction={0xe8, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xfffffffffffffd75, 0x0, 0x0, 0x0, @TCA_ACT_INDEX}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_INDEX}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbmod\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0xe8}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x24, 0x1a, 0x0, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x4c}}, 0x0) 1.99589836s ago: executing program 1 (id=1731): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)="03", 0xfffffffffffffd9f, 0xf0ff, 0x0, 0x25) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) 1.889752733s ago: executing program 4 (id=1732): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="fcc248358892000000000000000000950000edc5eaaa0000000000000000640000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) io_submit(0x0, 0x0, &(0x7f0000000600)) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f00000003c0)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = dup(r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000340)="6536d9e9ba2100ecf0820df60f0966b9800000c00f326635010000000f3066b9800000c00f326635000400000f3067260f3766b9800000c00f326635000800000f303e0f78e40fc769ca", 0x4a}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 1.385138605s ago: executing program 0 (id=1733): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000001200)=0x6d7c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000001780)=[{{&(0x7f00000010c0)=@nl=@kern={0x10, 0x0, 0x0, 0x8000}, 0x80, &(0x7f0000001600)=[{&(0x7f00000011c0)="0d1a52285d846c667fbd2b8fbfaeed35815095e525cf69155012746acd99e62d4795814db908812b3226fd179312bd20ec77c568c32d2868d1ad9186f438ee68", 0x40}, {&(0x7f00000012c0)="0a43b737c767e01e1756cca14587df9382a398f19e6cbcb0077bdb8ff82f0888674928cf181447d48fbba191ae33a917238d43", 0x33}, {&(0x7f0000001300)="4ef6fd4b05164809fbfdf5e453bb2d5dbfd2a912d7e9aaa04e3eef5ab7aa2a12833a84e2a288615283c9af65b106758915b2cb452dc7f5575e61a4923a2712f6fd277a45804e61344af08046f3e14a700bae362eac812ad2ff4b9b8bf1a57ab136a3f93afacef9123fd9733e333be0b57211ab16fa111ca02f05dbf24d6d93589719cdb376dc3e059f591c5272b4bdd9825aa6a7e7", 0x95}, {&(0x7f00000013c0)="4bfde9d1e2cd566bc85a07090915883e7d9c71a3b284862bc35e78b8c1110ea7462f201b8aa92b693995d90f1d5b173006c9eb89f225b269ad25f9151c236098c71cb662b002a684f21b8b9341b06a27125c6399b77f32f11e5f40121c189f40b20972193ff5543261296467d33a7d5485556398b1927aee76a3c259c9ea5222f5f8daf06583bc09e43dfd2005b3382561f2a9cde1044040b9710a991522b098055e6c99ea360959276077e021e443f5fa93b25294096342d89e1b38c97e7aedd269104fb86e8c37a97b0757a81f7d385e3bfd651365073c9b3d87a49e1af158f78131297604ee3f900b90961a3c458661f96c94eefc05413ea8f03c", 0xfc}, {&(0x7f00000014c0)='m', 0x1}, {&(0x7f0000002280)="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", 0x1000}, {&(0x7f0000001500)="d105e438c9f9cc1b07c2ca006bdc51259cdb3b20f65ab561dd75f14ba5e96aac69d821271b557c5b3f2aba41bf3bbddd841dc47b5e6cca7405efbe84414e3d210fddcabb646a72fd32736f893ee1b8ebdf043d03e1127f67cdfc73de3c7c5f2e5584807b2cc0e9d6c18ba5d90736438e70bb795894854ee255772a03318578f14e2a3ab57629f1d94a72c8994d39265430cb03652e46b0c795dcfa1094fd587184f054917c4a61a37afe0f14b8959ed32e3cabe5f0569a270491cb8ce58b754fe977a9194f071e326fb8e344c0e91d26f2d2103e9a5fdd7c41dacd23", 0xdc}], 0x7, &(0x7f0000001680)=[{0xf0, 0x1, 0x8, "6044f7ce0d44ab0954a6d726f53647d68a62d0b0243a930730da170deda572601c8e77009b75d6d854215c696e46df07b0c3be0052cf4ae191e2f4f13dce765819154362b74e80f89db37721094b18a4e351ad25188b92348ef2a2734915f554890be27e4754c48c18d38e50fa1b5158ef6bb24edccf0573ab405cca85c1a8320b184937346565cd8b9b6d3474ac935b58f2024875ece42c63949c6be8a25b94763f72e6f24ffda2a6d8521d2531a6b9ff67b6e10fed3d4ecbb9c205f548669e63fcdb28cdfe8eef13e3df3453f51d64c8a8dbf428bafdd3447038a2"}], 0xf0}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/41, 0x29}}], 0x1, 0x45833af96e4a39fc, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7fdd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x48) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x4, 0x2, 0xf, 0xbfffffe, 0x5a, @mcast1, @empty, 0x0, 0x8000, 0x0, 0x7}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000017c0)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x661, 0x1, 0x3, 0x1, r3, 0xc14, '\x00', r5, r6, 0x3, 0x5, 0x2, 0x2}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000002240)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1) r9 = socket$unix(0x1, 0x1, 0x0) fchdir(r9) getsockopt$sock_int(r9, 0x1, 0x2b, 0x0, &(0x7f00000000c0)) 1.274928218s ago: executing program 3 (id=1734): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x0, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x41) 1.228255072s ago: executing program 1 (id=1735): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x6}, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mbind(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x4000, &(0x7f0000000100), 0x5, 0x3) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x923c) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @bcast}, [@default, @rose, @null, @netrom, @netrom, @default]}, &(0x7f00000001c0)=0x48) setsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000200)=0x9, 0x4) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000240)=0xfffffffffffffff8, 0x7, 0x4) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x20a001, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f00000002c0), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x1ff) socket$kcm(0x29, 0x7, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0xc) fcntl$getown(r1, 0x9) mincore(&(0x7f0000ff9000/0x1000)=nil, 0x1000, &(0x7f00000003c0)=""/172) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) r5 = msgget(0x2, 0x6) msgrcv(r5, &(0x7f00000004c0)={0x0, ""/60}, 0x44, 0x1, 0x2000) msgctl$MSG_INFO(r5, 0xc, &(0x7f0000000540)=""/158) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000600)={0x0, "c829633b0e306297d131d83a38379fcd"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001600)={r6, 0x3, 0x2, 0x1}) io_cancel(0x0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x9, r4, &(0x7f0000001a00)="308e2deb606705a5466ec504e042c973158dd5d0ba4a857f5f1e8e4052bdab3b75816b0d01ac3b6f78256690c28f38a449961485d2a0f9c9cf9fcfe7355375", 0x3f, 0x0, 0x0, 0x0, r4}, &(0x7f0000001a80)) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001b00)=@generic={&(0x7f0000001ac0)='./file0\x00', 0x0, 0x10}, 0x18) msgsnd(r5, &(0x7f0000001b40)={0x1, "e12d4cb74a55f5ba5c8be778e7520e631de2174b007fcdfeed6e8feb994fdc5b4c2bb8567aa4bc1f9b38de92c361c8136f5ceec39e7333077d79fc4a2400753ca44bcca02bf9907c1759814a3c51daf69417"}, 0x5a, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x3000006, 0x12, r3, 0x0) r7 = accept$unix(r3, &(0x7f0000001bc0)=@abs, &(0x7f0000001c40)=0x6e) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f0000001c80)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000001d80)=@multiplanar_overlay={0x3ff, 0x3, 0x4, 0x10, 0x6, {0x0, 0xea60}, {0x4, 0x8, 0x4, 0x81, 0x0, 0x5, "3ce851e1"}, 0x2, 0x3, {&(0x7f0000001d00)=[{0x7ff, 0x0, {0x9}}, {0x6, 0x10000, {0x8}, 0x1}]}, 0xffff0001}) 1.093586238s ago: executing program 4 (id=1736): openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)="c5", 0x1, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$unlink(0x9, r0, r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4087, 0xff7}], 0x1, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000680)={0x8098f903, 0x0, "5d77c3defd75c9bd8354a99d4fb1d91e7427ce0f7bcfad5e9d03616e0ab7235f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x100]}) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="4319e2aabc1e4a13e696a7f0d7557242d86bf77f9c16bad3035548f5cdb5bc12d17a90b4063934ce295fa65c2323953d5e52a3ff4c543f094d35b793ab9f722d816203247e4fb54ca97d0053f1606f9fe21d35d3b25e2c3a713579039c1ea1f53aaeabd7b902297b5fd3dccd0b11db742f0e5a832b3adef3a6eae7952cbf3874ef323373b5d03e736994b6eef1e78e566d8c26a21a5e0896bc5b515603985946e75f93f7bd54adfdb387b992d26814248b9a22e770160dcb9694b89abd64650a", 0xc0, r0) keyctl$clear(0x7, r0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f904, 0x3}) ioctl$VIDIOC_DQEVENT(r7, 0x80885659, &(0x7f0000000440)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f00000002c0)={@local}) 1.092519119s ago: executing program 3 (id=1737): r0 = socket$inet(0xa, 0x3, 0xff) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x29, 0x16, 0x0, 0x4) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x29, 0x16, 0x0, 0xffb0) 1.088696598s ago: executing program 0 (id=1738): prlimit64(0x0, 0xa, &(0x7f00000000c0)={0x2000000108, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0xa, 0x1, [@m_vlan={0x4c, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL]}, {0x4}, {0x58}, {0xc}}}]}]}, 0x64}}, 0x0) r3 = openat2(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)={0x2, 0x1}, 0x18) syz_open_dev$dri(0x0, 0xfffffffffffffffc, 0x20800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x6, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_smc(0x2b, 0x1, 0x0) epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0xd, 0x4) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000000)={0x3ff}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x8, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000054cae528e1aa04a6cf821b97c701ee0926fb049cda4e3a0e12aa273a01dc3218ea116d681cc94d98f2999bb5782609f2d0b4c5e5d308d6a1c3accbc026c339eb0b3d5217fa03d0390683dd297ac04d9994a133be6ed889335948ab65765147cc21263fd39e22f114355304fbc8197b49a5e5b4ffc786c7a7828cf2f10a42f289", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) 880.485927ms ago: executing program 3 (id=1739): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0xfffffffe, {0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4874ef0904271a78949178fd825b775b5e55210c4037a557f88c97b6097ea4e9fdd1d167064e969100ff97aa6b42687995845c8c3ce42e76d6db19d5f4f5f283", "eba9d749fdc2dedff9641c2773c54efce1fa87820dae06070446988b8770438b12e6b80c265fdce83841f0f230d1f4fe7b5ba021316c17fb5112d7d0f278e48a", "993216b316a23f839a4f52fb850a6e43c8ad3e80603200a6c188ec32bd7c4549"}}) 22.901472ms ago: executing program 1 (id=1740): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1, 0x4}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xfffffffd, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast2, 0x3}, {@private=0xa010101}, {}, {@broadcast}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xa0}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22.0218ms ago: executing program 3 (id=1741): syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000005c0)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0xffffff84}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)) r5 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c00000111209078a41414bb00"/42], 0x0) sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='percpu_free_percpu\x00'}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) close(r9) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d80)=ANY=[@ANYBLOB="ac060000", @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="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"], 0x6ac}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="02002bbd7000fddbdf257c00000008000300", @ANYRES32, @ANYBLOB="c139463b2e002e614be6df20f79d00de041cf9fde69d9d0831424b87456e15b211359a929f48273e5a6b62"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0xc041) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 0s ago: executing program 4 (id=1742): socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x199, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x8000]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000300)={0x48, 0x1, r5, 0x0, 0x8000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r5, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000040)={0x28, 0x0, r5, r5, 0xa93, 0x0, 0x3fff}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r5, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) kernel console output (not intermixed with test programs): th error -71 [ 455.496045][ T1628] usb 2-1: USB disconnect, device number 36 [ 455.556066][ T5265] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 455.663835][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 455.675106][ T8] usb 4-1: config 0 has no interface number 0 [ 455.694581][ T8] usb 4-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= e.96 [ 455.705970][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.714623][ T8] usb 4-1: Product: syz [ 455.719328][ T8] usb 4-1: Manufacturer: syz [ 455.725872][ T8] usb 4-1: SerialNumber: syz [ 455.745990][ T8] usb 4-1: config 0 descriptor?? [ 455.754423][ T8] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (2013:0259) with 1 interfaces [ 455.765008][ T8] cx231xx 4-1:0.1: Not found matching IAD interface [ 455.779453][ T5265] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 455.832180][ T1628] usb 3-1: USB disconnect, device number 36 [ 455.844502][ T5265] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 455.877697][ T5265] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 455.895843][ T5265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.925079][ T9981] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 455.938546][ T5265] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 456.022675][ T9975] ======================================================= [ 456.022675][ T9975] WARNING: The mand mount option has been deprecated and [ 456.022675][ T9975] and is ignored by this kernel. Remove the mand [ 456.022675][ T9975] option from the mount to silence this warning. [ 456.022675][ T9975] ======================================================= [ 456.363859][T10008] binder: 10007:10008 ioctl 40305829 20000240 returned -22 [ 456.545927][ T58] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 456.726034][ T5265] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 456.737951][ T58] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 456.755332][ T58] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 456.765689][ T58] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 456.778841][ T58] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 456.793794][ T58] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 456.818949][ T58] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 456.828310][ T58] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 456.844469][ T58] usb 3-1: Product: syz [ 456.849592][ T58] usb 3-1: Manufacturer: syz [ 456.864582][ T58] cdc_wdm 3-1:1.0: skipping garbage [ 456.870501][ T58] cdc_wdm 3-1:1.0: skipping garbage [ 456.888904][ T58] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 456.902958][ T58] cdc_wdm 3-1:1.0: Unknown control protocol [ 456.962276][ T5265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.024990][ T5265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.035451][ T5265] usb 2-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 457.044913][ T5265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.061072][ T5265] usb 2-1: config 0 descriptor?? [ 458.122773][ T5265] usbhid 2-1:0.0: can't add hid device: -71 [ 458.129561][ T5265] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 458.142522][ T5265] usb 2-1: USB disconnect, device number 37 [ 458.227988][ T25] usb 4-1: USB disconnect, device number 34 [ 458.249318][ T5315] usb 1-1: USB disconnect, device number 46 [ 458.625928][ T5216] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 458.916211][ T5216] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.006083][ T5315] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 459.045980][ T5216] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 459.140269][ T5216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.171560][ T5216] usb 5-1: config 0 descriptor?? [ 459.254959][ T58] usb 3-1: USB disconnect, device number 37 [ 459.295594][ T5216] pwc: Askey VC010 type 2 USB webcam detected. [ 459.347650][ T5315] usb 4-1: Using ep0 maxpacket: 16 [ 459.378208][ T5315] usb 4-1: unable to get BOS descriptor or descriptor too short [ 459.407539][ T25] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 459.425578][ T5315] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.472871][ T5315] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 459.490177][ T5315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.533863][ T5315] usb 4-1: Product: syz [ 459.556023][ T5315] usb 4-1: Manufacturer: syz [ 459.568664][ T5216] pwc: send_video_command error -71 [ 459.581999][ T5315] usb 4-1: SerialNumber: syz [ 459.591400][ T5216] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 459.612493][ T5315] cdc_ether 4-1:1.0: skipping garbage [ 459.623172][ T5216] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 459.632496][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 459.646365][ T25] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 459.663881][ T5315] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 459.690988][ T25] usb 2-1: config 0 has no interface number 0 [ 459.700966][ T5216] usb 5-1: USB disconnect, device number 46 [ 459.716203][ T25] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 459.744913][ T25] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 459.754428][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.777007][ T25] usb 2-1: config 0 descriptor?? [ 459.808260][ T25] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 459.847292][ T58] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 460.035873][ T58] usb 3-1: device descriptor read/64, error -71 [ 460.246449][ T5216] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 460.316042][ T58] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 460.448022][ T5216] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.474516][ T5216] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 460.490116][ T5216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.495925][ T58] usb 3-1: device descriptor read/64, error -71 [ 460.501815][ T5216] usb 5-1: config 0 descriptor?? [ 460.513330][ T5216] pwc: Askey VC010 type 2 USB webcam detected. [ 460.646212][ T58] usb usb3-port1: attempt power cycle [ 461.640363][ T5216] pwc: recv_control_msg error -32 req 02 val 2b00 [ 461.657002][ T5216] pwc: recv_control_msg error -32 req 02 val 2700 [ 461.666759][ T5216] pwc: recv_control_msg error -32 req 02 val 2c00 [ 461.675588][ T5216] pwc: recv_control_msg error -32 req 04 val 1000 [ 461.712509][ T58] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 461.723969][ T5216] pwc: recv_control_msg error -32 req 04 val 1300 [ 461.749001][ T58] usb 3-1: device descriptor read/8, error -71 [ 461.760115][ T25] usb 4-1: USB disconnect, device number 35 [ 461.775380][ T5216] pwc: recv_control_msg error -32 req 04 val 1400 [ 461.783333][ T5216] pwc: recv_control_msg error -32 req 02 val 2000 [ 461.806742][ T5216] pwc: recv_control_msg error -32 req 02 val 2100 [ 461.855795][T10056] FAULT_INJECTION: forcing a failure. [ 461.855795][T10056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.877012][T10056] CPU: 0 UID: 0 PID: 10056 Comm: syz.3.1264 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0 [ 461.887495][T10056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 461.897578][T10056] Call Trace: [ 461.900868][T10056] [ 461.903798][T10056] dump_stack_lvl+0x241/0x360 [ 461.908489][T10056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.913683][T10056] ? __pfx__printk+0x10/0x10 [ 461.918356][T10056] ? __pfx_lock_release+0x10/0x10 [ 461.923388][T10056] ? vfs_write+0x7c4/0xc90 [ 461.927816][T10056] should_fail_ex+0x3b0/0x4e0 [ 461.932521][T10056] _copy_from_user+0x2f/0xe0 [ 461.937120][T10056] __sys_bpf+0x1a4/0x810 [ 461.941380][T10056] ? __pfx___sys_bpf+0x10/0x10 [ 461.946159][T10056] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 461.952138][T10056] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 461.958466][T10056] ? do_syscall_64+0x100/0x230 [ 461.963243][T10056] __x64_sys_bpf+0x7c/0x90 [ 461.967673][T10056] do_syscall_64+0xf3/0x230 [ 461.972176][T10056] ? clear_bhb_loop+0x35/0x90 [ 461.976950][T10056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.982849][T10056] RIP: 0033:0x7fda92577299 [ 461.987272][T10056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.006903][T10056] RSP: 002b:00007fda932ef048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 462.015397][T10056] RAX: ffffffffffffffda RBX: 00007fda92705f80 RCX: 00007fda92577299 [ 462.023387][T10056] RDX: 0000000000000020 RSI: 0000000020000240 RDI: 0000000000000004 [ 462.031373][T10056] RBP: 00007fda932ef0a0 R08: 0000000000000000 R09: 0000000000000000 [ 462.039358][T10056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.047342][T10056] R13: 000000000000000b R14: 00007fda92705f80 R15: 00007ffdc3a85738 [ 462.055339][T10056] [ 462.115100][T10020] x_tables: duplicate entry at hook 1 [ 462.147715][T10057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1263'. [ 462.161574][ T5216] pwc: recv_control_msg error -71 req 02 val 2500 [ 462.177056][ T5216] pwc: recv_control_msg error -71 req 02 val 2400 [ 462.191551][ T5264] usb 2-1: USB disconnect, device number 38 [ 462.216606][ T58] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 462.235618][ T5216] pwc: recv_control_msg error -71 req 02 val 2600 [ 462.247348][ T58] usb 3-1: device descriptor read/8, error -71 [ 462.253656][ T5216] pwc: recv_control_msg error -71 req 02 val 2900 [ 462.267956][ T5216] pwc: recv_control_msg error -71 req 02 val 2800 [ 462.290611][ T5216] pwc: recv_control_msg error -71 req 04 val 1100 [ 462.307531][ T5216] pwc: recv_control_msg error -71 req 04 val 1200 [ 462.336031][ T5216] pwc: Registered as video71. [ 462.349711][ T5216] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 462.365214][ T5216] usb 5-1: USB disconnect, device number 47 [ 462.376288][ T58] usb usb3-port1: unable to enumerate USB device [ 462.642065][ T5315] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 462.705859][ T5264] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 462.841325][ T5315] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 462.872332][ T5315] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 462.884435][ T5315] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 462.896108][ T5315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.910081][T10062] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 462.920580][ T5264] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.923508][ T5315] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 462.954654][ T5264] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 462.986251][ T5264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.022264][ T5264] usb 2-1: config 0 descriptor?? [ 463.035438][ T5264] pwc: Askey VC010 type 2 USB webcam detected. [ 463.205948][ T25] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 463.242700][ T5264] pwc: send_video_command error -71 [ 463.248889][ T5264] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 463.272798][ T5264] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 463.305894][ T5315] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 463.313460][ T5264] usb 2-1: USB disconnect, device number 39 [ 463.415838][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 463.424127][ T25] usb 1-1: config 1 has an invalid interface association descriptor of length 3, skipping [ 463.434214][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.456015][ T25] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 463.484093][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 463.493721][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.501929][ T25] usb 1-1: Product: syz [ 463.507403][ T25] usb 1-1: Manufacturer: syz [ 463.512776][ T25] usb 1-1: SerialNumber: syz [ 463.519293][ T5315] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 463.529909][ T5315] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 463.555845][ T5315] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 463.565998][ T5315] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 463.579866][ T5315] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 463.599734][ T5315] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 463.621002][ T5315] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 463.630746][ T5315] usb 5-1: Product: syz [ 463.635688][ T5315] usb 5-1: Manufacturer: syz [ 463.647627][ T5315] cdc_wdm 5-1:1.0: skipping garbage [ 463.653191][ T5315] cdc_wdm 5-1:1.0: skipping garbage [ 463.660591][ T5315] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 463.667088][ T5315] cdc_wdm 5-1:1.0: Unknown control protocol [ 463.888284][ T5264] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 466.355546][ T25] usb 1-1: USB disconnect, device number 47 [ 466.426439][ T5264] usb 2-1: device descriptor read/all, error -71 [ 466.467267][ T8936] usb 4-1: USB disconnect, device number 36 [ 466.675977][ T5216] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 466.890468][ T5216] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 466.906844][ T5216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.920294][ T5216] usb 3-1: config 0 descriptor?? [ 467.045959][ T1628] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 467.053873][ T8936] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 467.130331][ T5216] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0e [ 467.143151][ T5216] hackrf 3-1:0.0: Could not detect board [ 467.149226][ T5216] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 467.159646][ T5216] usb 3-1: USB disconnect, device number 42 [ 467.246808][ T1628] usb 1-1: Using ep0 maxpacket: 16 [ 467.256680][ T1628] usb 1-1: unable to get BOS descriptor or descriptor too short [ 467.261147][ T8936] usb 4-1: Using ep0 maxpacket: 8 [ 467.270426][ T1628] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.286293][ T1628] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 467.301297][ T1628] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.312069][ T1628] usb 1-1: Product: syz [ 467.312836][ T8936] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 467.317249][ T1628] usb 1-1: Manufacturer: syz [ 467.333797][ T8936] usb 4-1: config 0 has no interface number 0 [ 467.346091][ T8936] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 467.400188][ T25] usb 5-1: USB disconnect, device number 48 [ 467.409453][ T1628] usb 1-1: SerialNumber: syz [ 467.442649][ T1628] cdc_ether 1-1:1.0: skipping garbage [ 467.449128][ T1628] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 467.471624][ T8936] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 467.518727][ T8936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.556388][ T8936] usb 4-1: config 0 descriptor?? [ 467.573971][ T8936] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 467.805880][ T5264] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 468.028045][ T5264] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 468.057800][ T5264] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 468.088463][ T5219] Bluetooth: hci3: command 0x0406 tx timeout [ 468.111470][ T5264] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 468.180374][ T5264] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 468.238980][ T5264] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 468.274643][ T5264] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 468.285250][ T5264] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 468.305296][ T5264] usb 2-1: Product: syz [ 468.312934][ T5264] usb 2-1: Manufacturer: syz [ 468.333979][ T5264] cdc_wdm 2-1:1.0: skipping garbage [ 468.352149][ T5264] cdc_wdm 2-1:1.0: skipping garbage [ 468.389223][ T5264] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 468.402959][ T5264] cdc_wdm 2-1:1.0: Unknown control protocol [ 469.503691][ T58] usb 1-1: USB disconnect, device number 48 [ 469.652852][ T5264] usb 4-1: USB disconnect, device number 37 [ 469.793435][T10136] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1288'. [ 469.846482][ T25] usb 2-1: USB disconnect, device number 42 [ 470.032867][ T8936] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 470.246197][ T8936] usb 5-1: Using ep0 maxpacket: 8 [ 470.316166][ T8936] usb 5-1: config 1 has an invalid interface association descriptor of length 3, skipping [ 470.419026][ T58] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 470.513015][ T8936] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.683588][ T8936] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 470.749210][ T8936] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 470.777663][ T58] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 470.803308][ T8936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.835398][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.870683][ T8936] usb 5-1: Product: syz [ 470.876122][ T8936] usb 5-1: Manufacturer: syz [ 470.890400][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.902884][ T8936] usb 5-1: SerialNumber: syz [ 470.919825][ T58] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 470.987043][T10161] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1292'. [ 470.997953][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1292'. [ 471.006970][T10161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1292'. [ 471.148247][ T58] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 471.157570][ T58] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 471.166397][ T58] usb 1-1: Manufacturer: syz [ 471.173496][ T58] usb 1-1: config 0 descriptor?? [ 472.093352][ T58] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 472.115199][ T58] appleir 0003:05AC:8243.0014: No inputs registered, leaving [ 472.128070][T10181] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1299'. [ 472.163558][ T58] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 472.360740][ T1628] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 472.556281][ T1628] usb 2-1: Using ep0 maxpacket: 8 [ 472.570313][ T1628] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 472.578543][ T1628] usb 2-1: config 0 has no interface number 0 [ 472.587281][ T1628] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 472.602657][ T1628] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 472.614849][ T1628] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.632633][ T1628] usb 2-1: config 0 descriptor?? [ 472.648365][ T1628] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 472.836352][ T5264] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 473.041525][ T5264] usb 4-1: Using ep0 maxpacket: 32 [ 473.048925][ T5264] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 473.063282][ T5264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 473.090847][ T5264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 473.102133][ T5264] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 473.111219][ T5264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.121564][ T5264] usb 4-1: config 0 descriptor?? [ 473.136548][T10187] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 474.044306][ T25] usb 1-1: USB disconnect, device number 49 [ 474.044693][ T8936] usb 5-1: USB disconnect, device number 49 [ 474.058073][ T5264] hub 4-1:0.0: USB hub found [ 474.071141][ T5264] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 474.816113][ T5264] usbhid 4-1:0.0: can't add hid device: -71 [ 474.826857][ T5264] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 474.884425][ T5264] usb 4-1: USB disconnect, device number 38 [ 475.151681][ T25] usb 2-1: USB disconnect, device number 43 [ 475.402013][ T25] iowarrior 2-1:0.1: I/O-Warror #1 now disconnected [ 475.506867][T10219] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1307'. [ 475.518848][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1307'. [ 475.527856][T10219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1307'. [ 476.359371][T10227] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 477.605878][ T25] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 477.636175][ T5264] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 477.656534][ T8936] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 477.789085][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.806691][ T25] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 477.821508][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.832085][ T25] usb 5-1: config 0 descriptor?? [ 477.844132][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 477.858639][ T8936] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 477.870099][ T8936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.870246][ T5264] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 477.889839][ T8936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.903523][ T8936] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 477.916836][ T5264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.928238][ T5264] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 477.937973][ T5264] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 477.947938][ T8936] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 477.961594][ T8936] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 477.969830][ T5264] usb 3-1: Manufacturer: syz [ 477.975607][ T8936] usb 4-1: Manufacturer: syz [ 477.987007][ T5264] usb 3-1: config 0 descriptor?? [ 477.995923][ T8936] usb 4-1: config 0 descriptor?? [ 478.036364][ T5315] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 478.066021][ T25] pwc: send_video_command error -71 [ 478.071275][ T25] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 478.078912][ T25] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 478.090008][ T25] usb 5-1: USB disconnect, device number 50 [ 478.095929][ T5264] rc_core: IR keymap rc-hauppauge not found [ 478.095947][ T5264] Registered IR keymap rc-empty [ 478.097987][ T5264] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 478.131667][ T5264] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 478.265463][T10237] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.1316'. [ 478.426917][ T5315] usb 1-1: Using ep0 maxpacket: 8 [ 478.430588][ T8936] appleir 0003:05AC:8243.0015: unknown main item tag 0x0 [ 478.433872][ T5315] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 478.450494][ T5315] usb 1-1: config 0 has no interface number 0 [ 478.452028][ T8936] appleir 0003:05AC:8243.0015: No inputs registered, leaving [ 478.457814][ T5315] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 478.457867][ T5315] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 478.457890][ T5315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.479948][ T8936] appleir 0003:05AC:8243.0015: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 478.487898][ T5315] usb 1-1: config 0 descriptor?? [ 478.576067][ T5315] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 478.786025][ T25] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 479.076496][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.105154][ T25] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 479.126802][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.152738][ T25] usb 5-1: config 0 descriptor?? [ 479.165575][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 479.497327][T10233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1315'. [ 479.523010][T10233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.537469][T10233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.550701][ T5268] usb 4-1: USB disconnect, device number 39 [ 479.574887][ T25] pwc: recv_control_msg error -32 req 02 val 2b00 [ 479.598192][ T25] pwc: recv_control_msg error -32 req 02 val 2700 [ 479.606452][ T25] pwc: recv_control_msg error -32 req 02 val 2c00 [ 479.614025][ T25] pwc: recv_control_msg error -32 req 04 val 1000 [ 479.626504][ T25] pwc: recv_control_msg error -32 req 04 val 1300 [ 479.635880][ T25] pwc: recv_control_msg error -32 req 04 val 1400 [ 479.646848][ T25] pwc: recv_control_msg error -32 req 02 val 2000 [ 479.654364][ T25] pwc: recv_control_msg error -32 req 02 val 2100 [ 479.862713][T10235] x_tables: duplicate entry at hook 1 [ 479.887569][ T25] pwc: recv_control_msg error -71 req 02 val 2500 [ 479.895815][ T25] pwc: recv_control_msg error -71 req 02 val 2400 [ 479.915900][ T25] pwc: recv_control_msg error -71 req 02 val 2600 [ 479.923728][ T25] pwc: recv_control_msg error -71 req 02 val 2900 [ 479.930709][ T25] pwc: recv_control_msg error -71 req 02 val 2800 [ 479.937926][ T25] pwc: recv_control_msg error -71 req 04 val 1100 [ 479.944854][ T25] pwc: recv_control_msg error -71 req 04 val 1200 [ 479.952957][ T25] pwc: Registered as video71. [ 479.959961][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 479.975434][ T25] usb 5-1: USB disconnect, device number 51 [ 480.407116][ T25] usb 3-1: USB disconnect, device number 43 [ 480.452490][T10270] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1323'. [ 480.468112][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1323'. [ 480.477985][T10270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1323'. [ 481.295495][ T5268] usb 1-1: USB disconnect, device number 50 [ 481.335161][ T5268] iowarrior 1-1:0.1: I/O-Warror #1 now disconnected [ 481.948703][ T1628] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 482.987457][T10304] sp0: Synchronizing with TNC [ 482.995913][ T1628] usb 2-1: Using ep0 maxpacket: 8 [ 483.028317][ T1628] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 483.037926][ T1628] usb 2-1: config 0 has no interface number 0 [ 483.045256][ T1628] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 483.057362][ T1628] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 483.078108][ T1628] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.092327][ T1628] usb 2-1: config 0 descriptor?? [ 483.106939][ T1628] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 483.132549][T10306] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 483.155964][ T5315] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 483.225878][ T5268] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 483.316248][ T1628] usb 2-1: USB disconnect, device number 44 [ 483.332214][ T1628] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 483.355995][ T5315] usb 5-1: Using ep0 maxpacket: 16 [ 483.371219][ T5315] usb 5-1: unable to get BOS descriptor or descriptor too short [ 483.384855][ T5315] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.403476][ T5315] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 483.413414][ T5315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.421810][ T5315] usb 5-1: Product: syz [ 483.426351][ T5315] usb 5-1: Manufacturer: syz [ 483.430952][ T5315] usb 5-1: SerialNumber: syz [ 483.438019][ T5268] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 483.454830][ T5315] cdc_ether 5-1:1.0: skipping garbage [ 483.457249][ T5268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 483.474939][ T5315] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 483.491695][ T8936] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 483.503606][ T5268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 483.554769][ T5268] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 483.575852][ T5268] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 483.595880][ T5268] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.627953][ T5268] usb 4-1: config 0 descriptor?? [ 483.633708][T10302] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 483.729469][ T8936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 483.754944][ T8936] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 483.765870][ T8936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.798452][ T8936] usb 1-1: Product: syz [ 483.813670][ T8936] usb 1-1: Manufacturer: syz [ 483.822077][ T8936] usb 1-1: SerialNumber: syz [ 483.847687][ T8936] usb 1-1: config 0 descriptor?? [ 483.889395][ T8936] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 484.080455][ T5268] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 484.175602][T10314] hub 9-0:1.0: USB hub found [ 484.181611][T10314] hub 9-0:1.0: 8 ports detected [ 484.942484][ T5268] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 484.956916][ T5268] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 484.971307][T10302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.995220][ T5268] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 485.021419][T10302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.021591][ T1628] usb 5-1: USB disconnect, device number 52 [ 485.050500][ T8936] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 485.131833][ T8936] usb 4-1: USB disconnect, device number 40 [ 485.182114][T10323] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1338'. [ 485.197079][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1338'. [ 485.206662][T10323] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1338'. [ 485.335863][ T25] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 485.345922][ T5268] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 485.520317][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.531392][ T25] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 485.541525][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.552601][ T25] usb 3-1: config 0 descriptor?? [ 485.558165][ T5268] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 485.560738][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 485.571669][ T5268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.584812][ T5268] usb 2-1: config 0 descriptor?? [ 485.592283][ T5268] cp210x 2-1:0.0: cp210x converter detected [ 485.762692][T10316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.773153][T10316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.986126][ T8936] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 485.994767][ T25] pwc: recv_control_msg error -32 req 02 val 2b00 [ 486.002101][T10316] x_tables: duplicate entry at hook 1 [ 486.028227][ T25] pwc: recv_control_msg error -71 req 02 val 2700 [ 486.046537][ T25] pwc: recv_control_msg error -71 req 02 val 2c00 [ 486.055970][ T25] pwc: recv_control_msg error -71 req 04 val 1000 [ 486.073105][ T25] pwc: recv_control_msg error -71 req 04 val 1300 [ 486.082024][T10331] netlink: 'syz.4.1340': attribute type 10 has an invalid length. [ 486.091102][ T25] pwc: recv_control_msg error -71 req 04 val 1400 [ 486.106450][ T25] pwc: recv_control_msg error -71 req 02 val 2000 [ 486.127770][ T25] pwc: recv_control_msg error -71 req 02 val 2100 [ 486.135761][T10331] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 486.144312][ T25] pwc: recv_control_msg error -71 req 04 val 1500 [ 486.153436][T10331] team0: Failed to send options change via netlink (err -105) [ 486.155480][ T25] pwc: recv_control_msg error -71 req 02 val 2500 [ 486.165991][ T5268] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 486.169267][ T25] pwc: recv_control_msg error -71 req 02 val 2400 [ 486.176049][T10331] team0: Port device netdevsim0 added [ 486.184316][ T25] pwc: recv_control_msg error -71 req 02 val 2600 [ 486.187872][ T8936] usb 4-1: Using ep0 maxpacket: 8 [ 486.194167][ T25] pwc: recv_control_msg error -71 req 02 val 2900 [ 486.208809][ T8936] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 486.218594][ T25] pwc: recv_control_msg error -71 req 02 val 2800 [ 486.224210][ T8936] usb 4-1: config 0 has no interface number 0 [ 486.233797][ T25] pwc: recv_control_msg error -71 req 04 val 1100 [ 486.237151][ T5264] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 486.247821][ T25] pwc: recv_control_msg error -71 req 04 val 1200 [ 486.254392][ T8] usb 1-1: USB disconnect, device number 51 [ 486.268272][ T8936] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 486.276572][ T25] pwc: Registered as video71. [ 486.286997][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 486.295252][ T8936] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 486.298319][T10327] netlink: 'syz.4.1340': attribute type 10 has an invalid length. [ 486.315968][ T8936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.320806][ T25] usb 3-1: USB disconnect, device number 44 [ 486.347757][ T8936] usb 4-1: config 0 descriptor?? [ 486.354567][ T54] Bluetooth: Fragment is too long (len 22, expected 2) [ 486.383490][ T8936] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 486.402114][T10327] team0: Failed to send options change via netlink (err -105) [ 486.411823][T10327] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 486.429529][T10327] team0: Port device netdevsim0 removed [ 486.442973][T10327] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 486.453512][T10327] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 486.464931][T10327] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 486.480972][ T5268] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 486.503044][ T5268] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 486.517795][ T5268] usb 2-1: cp210x converter now attached to ttyUSB0 [ 486.528244][ T5268] usb 2-1: USB disconnect, device number 45 [ 486.539089][ T5268] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 486.556193][ T5268] cp210x 2-1:0.0: device disconnected [ 489.325878][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 489.663376][ T5315] usb 4-1: USB disconnect, device number 41 [ 489.690496][ T5315] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 489.906594][T10355] hub 9-0:1.0: USB hub found [ 489.913633][T10355] hub 9-0:1.0: 8 ports detected [ 491.257371][T10362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1349'. [ 491.334536][T10368] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1351'. [ 491.433373][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 491.519999][T10381] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 491.735987][ T5264] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 491.755887][ T5315] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 491.932003][ T5264] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 491.942405][ T5264] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 491.946630][ T5315] usb 5-1: Using ep0 maxpacket: 16 [ 491.957879][ T5264] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 491.992749][ T5315] usb 5-1: unable to get BOS descriptor or descriptor too short [ 491.996030][ T5264] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 492.010596][ T5315] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.023398][ T5268] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 492.037788][ T5315] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 492.050456][ T5315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.050868][ T5264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.058804][ T5315] usb 5-1: Product: syz [ 492.071381][ T5315] usb 5-1: Manufacturer: syz [ 492.072055][ T5264] usb 4-1: Product: syz [ 492.077165][ T5315] usb 5-1: SerialNumber: syz [ 492.082046][ T5264] usb 4-1: Manufacturer: syz [ 492.095624][ T5264] usb 4-1: SerialNumber: syz [ 492.108318][ T5315] cdc_ether 5-1:1.0: skipping garbage [ 492.114177][ T5315] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 492.116646][ T5264] hub 4-1:1.0: bad descriptor, ignoring hub [ 492.134879][ T5264] hub 4-1:1.0: probe with driver hub failed with error -5 [ 492.258496][ T5268] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 492.274534][ T5268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 492.288965][ T5268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 492.301540][ T5268] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 492.334664][ T5268] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 492.344749][ T5264] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 492.360673][ T5268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.528987][ T5268] usb 1-1: config 0 descriptor?? [ 492.560020][T10386] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 493.480430][ T1628] usb 5-1: USB disconnect, device number 53 [ 493.535004][T10398] netlink: 'syz.1.1356': attribute type 10 has an invalid length. [ 493.570880][T10398] team0: Failed to send options change via netlink (err -105) [ 493.586521][ T5216] usb 4-1: USB disconnect, device number 42 [ 493.595288][T10398] team0: Port device netdevsim0 added [ 493.601939][ T5216] usblp0: removed [ 493.614828][ T25] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 493.619671][ T5268] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 493.638141][T10401] netlink: 'syz.1.1356': attribute type 10 has an invalid length. [ 493.646259][ T5268] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 493.654584][ T5268] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 493.669779][T10401] team0: Failed to send options change via netlink (err -105) [ 493.685295][ T5268] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 493.705966][T10401] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 493.725997][ T5315] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 493.734121][ T54] Bluetooth: Fragment is too long (len 22, expected 2) [ 493.752159][T10401] team0: Port device netdevsim0 removed [ 493.778040][T10401] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 493.852598][T10386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.863804][T10386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.945872][ T5315] usb 3-1: Using ep0 maxpacket: 8 [ 493.957049][ T1628] usb 1-1: USB disconnect, device number 52 [ 493.967363][ T5315] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 494.017126][ T5315] usb 3-1: config 0 has no interface number 0 [ 494.042497][ T5315] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 494.055007][ T5315] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 494.065061][ T5315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.079579][ T5315] usb 3-1: config 0 descriptor?? [ 494.097366][ T5315] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 494.193634][T10409] FAULT_INJECTION: forcing a failure. [ 494.193634][T10409] name failslab, interval 1, probability 0, space 0, times 0 [ 494.212723][T10409] CPU: 1 UID: 0 PID: 10409 Comm: syz.3.1361 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0 [ 494.223213][T10409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 494.233297][T10409] Call Trace: [ 494.236601][T10409] [ 494.239554][T10409] dump_stack_lvl+0x241/0x360 [ 494.244259][T10409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.249491][T10409] ? __pfx__printk+0x10/0x10 [ 494.254108][T10409] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 494.259680][T10409] ? __pfx___might_resched+0x10/0x10 [ 494.264993][T10409] should_fail_ex+0x3b0/0x4e0 [ 494.269703][T10409] ? skb_clone+0x20c/0x390 [ 494.274138][T10409] should_failslab+0xac/0x100 [ 494.278839][T10409] ? skb_clone+0x20c/0x390 [ 494.283274][T10409] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 494.288684][T10409] skb_clone+0x20c/0x390 [ 494.292960][T10409] nfnetlink_rcv+0x575/0x2a90 [ 494.297671][T10409] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 494.303425][T10409] ? __dev_queue_xmit+0x1763/0x3e90 [ 494.308655][T10409] ? kasan_save_track+0x51/0x80 [ 494.313531][T10409] ? do_syscall_64+0xf3/0x230 [ 494.318234][T10409] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 494.323397][T10409] ? ref_tracker_free+0x643/0x7e0 [ 494.328443][T10409] ? __asan_memcpy+0x40/0x70 [ 494.333057][T10409] ? __pfx_ref_tracker_free+0x10/0x10 [ 494.338467][T10409] ? netlink_deliver_tap+0x2e/0x1b0 [ 494.343694][T10409] ? skb_clone+0x240/0x390 [ 494.348130][T10409] ? __pfx_lock_release+0x10/0x10 [ 494.353182][T10409] ? __netlink_deliver_tap+0x77e/0x7c0 [ 494.358676][T10409] ? netlink_deliver_tap+0x2e/0x1b0 [ 494.363898][T10409] netlink_unicast+0x7f0/0x990 [ 494.368786][T10409] ? __pfx_netlink_unicast+0x10/0x10 [ 494.374100][T10409] ? __virt_addr_valid+0x183/0x530 [ 494.379253][T10409] ? __check_object_size+0x49c/0x900 [ 494.384564][T10409] ? bpf_lsm_netlink_send+0x9/0x10 [ 494.389707][T10409] netlink_sendmsg+0x8e4/0xcb0 [ 494.394503][T10409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.399814][T10409] ? __import_iovec+0x536/0x820 [ 494.404685][T10409] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 494.409997][T10409] ? security_socket_sendmsg+0x87/0xb0 [ 494.415482][T10409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.420793][T10409] __sock_sendmsg+0x221/0x270 [ 494.425499][T10409] ____sys_sendmsg+0x525/0x7d0 [ 494.430309][T10409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.435646][T10409] __sys_sendmsg+0x2b0/0x3a0 [ 494.440320][T10409] ? __pfx___sys_sendmsg+0x10/0x10 [ 494.445464][T10409] ? vfs_write+0x7c4/0xc90 [ 494.449951][T10409] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 494.456324][T10409] ? do_syscall_64+0x100/0x230 [ 494.461114][T10409] ? do_syscall_64+0xb6/0x230 [ 494.465899][T10409] do_syscall_64+0xf3/0x230 [ 494.470413][T10409] ? clear_bhb_loop+0x35/0x90 [ 494.475101][T10409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.480998][T10409] RIP: 0033:0x7fda92577299 [ 494.485405][T10409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.505003][T10409] RSP: 002b:00007fda932ef048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.513407][T10409] RAX: ffffffffffffffda RBX: 00007fda92705f80 RCX: 00007fda92577299 [ 494.521373][T10409] RDX: 0000000000000000 RSI: 0000000020000840 RDI: 0000000000000003 [ 494.529423][T10409] RBP: 00007fda932ef0a0 R08: 0000000000000000 R09: 0000000000000000 [ 494.537390][T10409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.545353][T10409] R13: 000000000000000b R14: 00007fda92705f80 R15: 00007ffdc3a85738 [ 494.553322][T10409] [ 494.749930][T10415] hub 9-0:1.0: USB hub found [ 494.755452][T10415] hub 9-0:1.0: 8 ports detected [ 495.825515][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 496.774947][ T5268] usb 3-1: USB disconnect, device number 45 [ 496.798432][ T5268] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 498.331577][T10461] FAULT_INJECTION: forcing a failure. [ 498.331577][T10461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.383190][T10461] CPU: 0 UID: 0 PID: 10461 Comm: syz.3.1375 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0 [ 498.393839][T10461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 498.403891][T10461] Call Trace: [ 498.407165][T10461] [ 498.410089][T10461] dump_stack_lvl+0x241/0x360 [ 498.414765][T10461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.419958][T10461] ? __pfx__printk+0x10/0x10 [ 498.424554][T10461] ? __pfx_lock_release+0x10/0x10 [ 498.429598][T10461] should_fail_ex+0x3b0/0x4e0 [ 498.434284][T10461] _copy_from_user+0x2f/0xe0 [ 498.438873][T10461] get_itimerspec64+0xaa/0x460 [ 498.443664][T10461] ? __pfx_vfs_write+0x10/0x10 [ 498.448708][T10461] ? __pfx_get_itimerspec64+0x10/0x10 [ 498.454089][T10461] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 498.460065][T10461] ? __fget_files+0x3f6/0x470 [ 498.464737][T10461] __x64_sys_timer_settime+0x13d/0x240 [ 498.470197][T10461] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 498.476268][T10461] ? do_syscall_64+0x100/0x230 [ 498.481028][T10461] ? do_syscall_64+0xb6/0x230 [ 498.485706][T10461] do_syscall_64+0xf3/0x230 [ 498.490205][T10461] ? clear_bhb_loop+0x35/0x90 [ 498.494964][T10461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.500852][T10461] RIP: 0033:0x7fda92577299 [ 498.505262][T10461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.524863][T10461] RSP: 002b:00007fda932ef048 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 498.533282][T10461] RAX: ffffffffffffffda RBX: 00007fda92705f80 RCX: 00007fda92577299 [ 498.541253][T10461] RDX: 00000000200001c0 RSI: 0000000000000005 RDI: 0000000000000000 [ 498.549219][T10461] RBP: 00007fda932ef0a0 R08: 0000000000000000 R09: 0000000000000000 [ 498.557270][T10461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.565232][T10461] R13: 000000000000000b R14: 00007fda92705f80 R15: 00007ffdc3a85738 [ 498.573211][T10461] [ 498.576334][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.836138][ T1628] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 499.218591][ T1628] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 499.272697][ T1628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 499.329308][T10482] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1383'. [ 499.374128][ T1628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 499.420306][T10483] netlink: 'syz.0.1382': attribute type 10 has an invalid length. [ 499.489891][ T1628] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 499.615304][ T1628] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 499.624875][ T1628] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.649343][ T1628] usb 2-1: config 0 descriptor?? [ 499.685424][T10464] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 499.855715][ T5219] Bluetooth: Fragment is too long (len 22, expected 2) [ 499.907540][T10483] team0: Failed to send options change via netlink (err -105) [ 499.915191][T10483] team0: Port device netdevsim0 added [ 499.941331][ T25] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 499.963765][T10487] netlink: 'syz.0.1382': attribute type 10 has an invalid length. [ 500.017018][T10487] team0: Failed to send options change via netlink (err -105) [ 500.033253][T10487] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 500.084936][T10487] team0: Port device netdevsim0 removed [ 500.096321][ T5268] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 500.142381][T10487] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 500.299615][ T5268] usb 5-1: Using ep0 maxpacket: 8 [ 500.310888][ T5268] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 500.323560][ T1628] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 500.331232][ T5268] usb 5-1: config 0 has no interface number 0 [ 500.334685][ T1628] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 500.337716][ T5268] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 500.350970][ T1628] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 500.369196][ T1628] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 500.375820][ T5268] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 500.385942][ T25] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 500.401233][ T5268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.428123][ T5268] usb 5-1: config 0 descriptor?? [ 500.439329][ T5268] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 500.544549][T10464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.553418][T10464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.583563][ T25] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 500.595595][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.607588][ T25] usb 3-1: config 0 descriptor?? [ 500.617155][ T5268] usb 2-1: USB disconnect, device number 46 [ 500.962236][T10498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1385'. [ 500.983020][ T25] usb 3-1: Cannot read MAC address [ 500.996737][ T25] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 501.031024][ T25] usb 3-1: USB disconnect, device number 46 [ 501.685903][ T5219] Bluetooth: hci3: command 0x0406 tx timeout [ 501.852386][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.860001][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.931687][ C0] eth0: bad gso: type: 1, size: 1408 [ 502.901844][ T8936] usb 5-1: USB disconnect, device number 54 [ 502.967097][ T8936] iowarrior 5-1:0.1: I/O-Warror #1 now disconnected [ 503.046952][T10520] program syz.4.1390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 503.443962][T10536] hub 9-0:1.0: USB hub found [ 503.449537][T10536] hub 9-0:1.0: 8 ports detected [ 505.771731][T10550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1401'. [ 505.796278][T10550] vlan1: entered promiscuous mode [ 505.825271][T10550] macvlan1: entered promiscuous mode [ 505.847166][T10550] macvlan1: left promiscuous mode [ 506.120708][ T25] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 506.397019][ T1628] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 507.145886][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 507.155840][ T1628] usb 2-1: Using ep0 maxpacket: 32 [ 507.163766][ T1628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 507.174879][ T25] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 507.189925][ T1628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 507.199960][ T25] usb 3-1: config 0 has no interface number 0 [ 507.216027][ T25] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 507.243991][ T1628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 507.264029][ T25] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 507.276092][ T1628] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 507.290282][ T1628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.298506][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.318773][ T1628] usb 2-1: Product: syz [ 507.336442][ T25] usb 3-1: config 0 descriptor?? [ 507.341539][ T1628] usb 2-1: Manufacturer: syz [ 507.351653][ T1628] usb 2-1: SerialNumber: syz [ 507.366059][ T25] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 507.381700][ T1628] usb 2-1: config 0 descriptor?? [ 507.437874][ T8] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 507.617772][ T25] usb 2-1: USB disconnect, device number 47 [ 507.668119][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 507.702360][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 507.735330][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 507.770712][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 507.785720][ T8] usb 4-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 507.797437][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 507.805486][ T8] usb 4-1: SerialNumber: syz [ 507.813282][T10566] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 507.823250][ T8] hub 4-1:1.0: bad descriptor, ignoring hub [ 507.832848][ T8] hub 4-1:1.0: probe with driver hub failed with error -5 [ 508.034789][T10566] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 508.261498][T10574] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1407'. [ 508.653736][T10600] 9pnet_fd: Insufficient options for proto=fd [ 508.793267][T10607] netlink: 'syz.1.1414': attribute type 3 has an invalid length. [ 508.917347][ T1628] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 512.205847][ T5315] usb 3-1: USB disconnect, device number 47 [ 512.214714][ T8] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 512.249947][ T5315] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 512.276062][ T8] usb 4-1: USB disconnect, device number 43 [ 513.659015][T10642] hub 9-0:1.0: USB hub found [ 513.664770][T10642] hub 9-0:1.0: 8 ports detected [ 514.473514][T10643] 9pnet_fd: Insufficient options for proto=fd [ 515.148362][T10655] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1428'. [ 518.055885][ T8] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 518.189959][ T5265] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 518.393867][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1436'. [ 518.403957][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1436'. [ 518.475934][ T8] usb 5-1: device not accepting address 56, error -71 [ 521.618631][T10702] 9pnet_fd: Insufficient options for proto=fd [ 522.185919][ T5264] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 525.436153][ T5264] usb 3-1: Using ep0 maxpacket: 8 [ 525.580623][ T5264] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 525.596053][ T5265] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 525.603036][ T5264] usb 3-1: can't read configurations, error -71 [ 526.805843][ T5264] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 527.817938][ T5264] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 527.832605][ T5264] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 527.842674][ T5264] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 527.855836][ T5264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.879219][T10726] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 527.903992][ T5264] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 528.035925][ T25] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 528.935139][ T5265] usb 3-1: USB disconnect, device number 49 [ 528.991914][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 529.018586][ T25] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 529.038185][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.072883][ T25] usb 5-1: Product: syz [ 529.089574][ T25] usb 5-1: Manufacturer: syz [ 529.099952][ T25] usb 5-1: SerialNumber: syz [ 529.112259][ T25] usb 5-1: config 0 descriptor?? [ 529.255959][ T5264] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 529.375858][ T5315] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 529.446249][ T5264] usb 1-1: Using ep0 maxpacket: 8 [ 529.459119][ T5264] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 529.471460][ T5264] usb 1-1: config 0 has no interface number 0 [ 529.478863][ T5264] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 529.490823][ T5265] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 529.494127][ T5264] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 529.513477][ T5264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.552395][ T5264] usb 1-1: config 0 descriptor?? [ 529.582705][ T5264] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 529.595917][ T5315] usb 2-1: Using ep0 maxpacket: 16 [ 529.629130][ T5315] usb 2-1: unable to get BOS descriptor or descriptor too short [ 529.665439][ T5315] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.706975][ T5315] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 529.721037][ T5265] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 529.745074][ T5315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.753475][ T25] airspy 5-1:0.0: Board ID: 38 [ 529.758480][ T5265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.768641][ T25] airspy 5-1:0.0: Firmware version: 8 [ 529.774379][ T5315] usb 2-1: Product: syz [ 529.785311][ T5265] usb 3-1: config 0 descriptor?? [ 529.791937][ T5315] usb 2-1: Manufacturer: syz [ 529.798115][ T5315] usb 2-1: SerialNumber: syz [ 529.821595][ T5315] cdc_ether 2-1:1.0: skipping garbage [ 529.833666][ T5315] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 530.154951][ T5265] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0e [ 530.191424][ T5265] hackrf 3-1:0.0: Could not detect board [ 530.202755][ T5265] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 530.215169][ T5265] usb 3-1: USB disconnect, device number 50 [ 531.217703][ T25] airspy 5-1:0.0: usb_control_msg() failed -110 request 0e [ 531.277910][ T25] airspy 5-1:0.0: Registered as swradio16 [ 531.318248][ T25] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 531.332630][ T1628] usb 2-1: USB disconnect, device number 49 [ 531.379573][ T25] usb 5-1: USB disconnect, device number 59 [ 531.444821][T10776] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1461'. [ 531.454076][T10776] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1461'. [ 532.722915][ T25] usb 1-1: USB disconnect, device number 53 [ 532.768810][ T25] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 532.965934][T10797] hub 9-0:1.0: USB hub found [ 532.971810][T10797] hub 9-0:1.0: 8 ports detected [ 533.823701][ T5265] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 534.565817][ T5265] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 534.579839][ T5265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 534.591511][ T5265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 534.602962][ T5265] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 534.621068][ T5265] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 534.634459][ T5265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.645079][ T5265] usb 5-1: config 0 descriptor?? [ 534.666513][T10786] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 535.232422][ T5265] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 535.259135][ T5265] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 535.281970][ T5265] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 535.387266][ T5265] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 535.836471][T10786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.845201][T10786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.002121][ T25] usb 5-1: USB disconnect, device number 60 [ 536.398600][ T5265] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 536.635996][ T5265] usb 2-1: Using ep0 maxpacket: 16 [ 536.682309][ T5265] usb 2-1: unable to get BOS descriptor or descriptor too short [ 536.714668][ T5265] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.738728][ T5265] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 536.762906][ T5265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.786030][ T5265] usb 2-1: Product: syz [ 536.804834][ T5265] usb 2-1: Manufacturer: syz [ 536.815207][ T5265] usb 2-1: SerialNumber: syz [ 536.853712][ T5265] cdc_ether 2-1:1.0: skipping garbage [ 536.864686][ T5265] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 537.660120][ T5265] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 537.873083][ T5265] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 537.910235][ T5265] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 537.955261][ T5265] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 537.996468][ T5265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.043569][T10829] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 538.088698][ T5265] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 539.506135][ T5265] usb 2-1: USB disconnect, device number 50 [ 539.779587][ T5219] Bluetooth: hci0: command 0x0c1a tx timeout [ 540.209759][T10853] hub 9-0:1.0: USB hub found [ 540.217742][T10853] hub 9-0:1.0: 8 ports detected [ 542.232151][T10856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1480'. [ 542.247808][ T8936] usb 5-1: USB disconnect, device number 61 [ 542.564045][T10865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1481'. [ 542.736510][T10870] hub 9-0:1.0: USB hub found [ 542.742956][T10870] hub 9-0:1.0: 8 ports detected [ 543.710036][T10878] Dead loop on virtual device ip6_vti0, fix it urgently! [ 543.718047][T10878] Dead loop on virtual device ip6_vti0, fix it urgently! [ 543.725291][T10878] Dead loop on virtual device ip6_vti0, fix it urgently! [ 543.733564][T10878] Dead loop on virtual device ip6_vti0, fix it urgently! [ 543.740873][T10878] Dead loop on virtual device ip6_vti0, fix it urgently! [ 543.748236][T10878] Dead loop on virtual device ip6_vti0, fix it urgently! [ 545.763380][T10912] hub 9-0:1.0: USB hub found [ 545.769223][T10912] hub 9-0:1.0: 8 ports detected [ 546.509036][ C0] eth0: bad gso: type: 1, size: 1408 [ 546.616034][ T5265] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 546.986093][ T5265] usb 5-1: Using ep0 maxpacket: 16 [ 547.203719][ T5265] usb 5-1: unable to get BOS descriptor or descriptor too short [ 547.214208][ T5265] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 547.308542][ T5265] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 547.364251][ T5265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.373509][ T5265] usb 5-1: Product: syz [ 547.378019][ T5265] usb 5-1: Manufacturer: syz [ 547.382647][ T5265] usb 5-1: SerialNumber: syz [ 547.393248][ T5265] cdc_ether 5-1:1.0: skipping garbage [ 547.406497][ T5265] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 547.644427][ T8] usb 5-1: USB disconnect, device number 62 [ 549.997094][T10983] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1514'. [ 550.085981][ T1628] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 551.027825][T10999] FAULT_INJECTION: forcing a failure. [ 551.027825][T10999] name failslab, interval 1, probability 0, space 0, times 0 [ 551.058876][ T1628] usb 1-1: Using ep0 maxpacket: 16 [ 551.080098][ T1628] usb 1-1: unable to get BOS descriptor or descriptor too short [ 551.097156][ T1628] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.126938][T10999] CPU: 1 UID: 0 PID: 10999 Comm: syz.3.1518 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0 [ 551.137400][T10999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 551.147472][T10999] Call Trace: [ 551.150739][T10999] [ 551.153652][T10999] dump_stack_lvl+0x241/0x360 [ 551.158322][T10999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 551.163519][T10999] ? __pfx__printk+0x10/0x10 [ 551.168189][T10999] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 551.173657][T10999] ? __pfx___might_resched+0x10/0x10 [ 551.178948][T10999] should_fail_ex+0x3b0/0x4e0 [ 551.183636][T10999] should_failslab+0xac/0x100 [ 551.188323][T10999] ? __xdp_reg_mem_model+0x1e3/0x620 [ 551.193607][T10999] __kmalloc_cache_noprof+0x6c/0x2c0 [ 551.198893][T10999] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 551.204896][T10999] __xdp_reg_mem_model+0x1e3/0x620 [ 551.210009][T10999] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 551.215738][T10999] ? page_pool_list+0x232/0x280 [ 551.220600][T10999] xdp_reg_mem_model+0x22/0x40 [ 551.225355][T10999] bpf_test_run_xdp_live+0x31e/0x2110 [ 551.230729][T10999] ? bpf_dispatcher_change_prog+0xd88/0xf10 [ 551.236631][T10999] ? __pfx_lock_release+0x10/0x10 [ 551.241673][T10999] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 551.246968][T10999] ? __mutex_unlock_slowpath+0x21d/0x750 [ 551.252602][T10999] ? bpf_dispatcher_xdp_func+0x25/0x30 [ 551.258060][T10999] ? __mutex_unlock_slowpath+0x21d/0x750 [ 551.263694][T10999] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 551.269499][T10999] ? synchronize_rcu+0x11b/0x360 [ 551.274441][T10999] ? __pfx_synchronize_rcu+0x10/0x10 [ 551.279741][T10999] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 551.285983][T10999] ? 0xffffffffa000201c [ 551.290164][T10999] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 551.296081][T10999] ? _copy_from_user+0xa6/0xe0 [ 551.301040][T10999] ? bpf_test_init+0x15a/0x180 [ 551.305800][T10999] ? xdp_convert_md_to_buff+0x5b/0x330 [ 551.311261][T10999] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 551.316635][T10999] ? __pfx_lock_release+0x10/0x10 [ 551.321670][T10999] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 551.327475][T10999] ? __fget_files+0x29/0x470 [ 551.332072][T10999] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 551.337876][T10999] bpf_prog_test_run+0x33a/0x3b0 [ 551.342815][T10999] __sys_bpf+0x48d/0x810 [ 551.347064][T10999] ? __pfx___sys_bpf+0x10/0x10 [ 551.351836][T10999] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 551.357817][T10999] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 551.364143][T10999] ? do_syscall_64+0x100/0x230 [ 551.368917][T10999] __x64_sys_bpf+0x7c/0x90 [ 551.373333][T10999] do_syscall_64+0xf3/0x230 [ 551.377837][T10999] ? clear_bhb_loop+0x35/0x90 [ 551.382578][T10999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.388503][T10999] RIP: 0033:0x7fda92577299 [ 551.392911][T10999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.412619][T10999] RSP: 002b:00007fda932ef048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 551.421051][T10999] RAX: ffffffffffffffda RBX: 00007fda92705f80 RCX: 00007fda92577299 [ 551.429216][T10999] RDX: 0000000000000057 RSI: 0000000020000240 RDI: 000000000000000a [ 551.437201][T10999] RBP: 00007fda932ef0a0 R08: 0000000000000000 R09: 0000000000000000 [ 551.445180][T10999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.453146][T10999] R13: 000000000000000b R14: 00007fda92705f80 R15: 00007ffdc3a85738 [ 551.461128][T10999] [ 551.464233][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.479519][ T5219] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 551.496605][ T1628] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 551.506055][ T5219] Bluetooth: hci5: Injecting HCI hardware error event [ 551.516096][ T5219] Bluetooth: hci5: hardware error 0x00 [ 551.524367][ T1628] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.536094][ T1628] usb 1-1: Product: syz [ 551.540473][ T1628] usb 1-1: Manufacturer: syz [ 551.549099][ T1628] usb 1-1: SerialNumber: syz [ 551.587622][ T1628] cdc_ether 1-1:1.0: skipping garbage [ 551.593301][ T1628] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 552.074749][ T5265] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 552.285045][ T1628] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 552.766244][ T5265] usb 2-1: Using ep0 maxpacket: 8 [ 552.778569][ T5265] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.803222][ T5265] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 106, changing to 10 [ 552.851920][ T5265] usb 2-1: config 1 interface 0 has no altsetting 0 [ 552.870119][ T5216] usb 1-1: USB disconnect, device number 54 [ 552.887555][ T1628] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.906005][ T1628] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.921271][ T5265] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.40 [ 552.921282][T11018] netlink: 'syz.3.1523': attribute type 1 has an invalid length. [ 552.921302][ T5265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.930454][T11018] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1523'. [ 552.946074][ T1628] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 552.946350][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1523'. [ 552.962330][ T5265] usb 2-1: Product: 㠁 [ 552.980144][ T1628] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.998662][ T5265] usb 2-1: Manufacturer: 뷝⪚押ꆺܸ㌤䪝䔁਻ฑล헭黏 [ 553.010283][ T1628] usb 3-1: config 0 descriptor?? [ 553.405905][ T5216] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 553.700663][ T5219] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 556.271713][ T5265] usbhid 2-1:1.0: can't add hid device: -71 [ 556.303584][ T1628] usbhid 3-1:0.0: can't add hid device: -71 [ 556.313106][T11028] FAULT_INJECTION: forcing a failure. [ 556.313106][T11028] name failslab, interval 1, probability 0, space 0, times 0 [ 556.327555][T11028] CPU: 1 UID: 0 PID: 11028 Comm: syz.4.1526 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0 [ 556.338008][T11028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 556.348082][T11028] Call Trace: [ 556.351382][T11028] [ 556.354332][T11028] dump_stack_lvl+0x241/0x360 [ 556.359041][T11028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.364352][T11028] ? __pfx__printk+0x10/0x10 [ 556.368965][T11028] ? fs_reclaim_acquire+0x93/0x140 [ 556.374095][T11028] ? __pfx___might_resched+0x10/0x10 [ 556.379404][T11028] should_fail_ex+0x3b0/0x4e0 [ 556.384112][T11028] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 556.389856][T11028] should_failslab+0xac/0x100 [ 556.394558][T11028] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 556.400298][T11028] __kmalloc_noprof+0xd8/0x400 [ 556.405089][T11028] ? kfree+0x4e/0x360 [ 556.409096][T11028] tomoyo_realpath_from_path+0xcf/0x5e0 [ 556.414701][T11028] tomoyo_path_number_perm+0x23a/0x880 [ 556.420181][T11028] ? tomoyo_path_number_perm+0x208/0x880 [ 556.425841][T11028] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 556.431859][T11028] ? __fget_files+0x29/0x470 [ 556.436461][T11028] ? __fget_files+0x3f6/0x470 [ 556.441143][T11028] ? __fget_files+0x29/0x470 [ 556.445737][T11028] security_file_ioctl+0x75/0xb0 [ 556.450682][T11028] __se_sys_ioctl+0x47/0x170 [ 556.455272][T11028] do_syscall_64+0xf3/0x230 [ 556.459775][T11028] ? clear_bhb_loop+0x35/0x90 [ 556.464452][T11028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.470341][T11028] RIP: 0033:0x7fb0f5d77299 [ 556.474752][T11028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.494537][T11028] RSP: 002b:00007fb0f6b77048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.502952][T11028] RAX: ffffffffffffffda RBX: 00007fb0f5f06130 RCX: 00007fb0f5d77299 [ 556.510921][T11028] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000007 [ 556.518886][T11028] RBP: 00007fb0f6b770a0 R08: 0000000000000000 R09: 0000000000000000 [ 556.526851][T11028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.534903][T11028] R13: 000000000000006e R14: 00007fb0f5f06130 R15: 00007ffdd9184e78 [ 556.542883][T11028] [ 556.550624][ T5265] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 556.559846][ T1628] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 556.571923][ T1628] usb 3-1: USB disconnect, device number 51 [ 556.581346][ T5265] usb 2-1: USB disconnect, device number 51 [ 556.603856][T11028] ERROR: Out of memory at tomoyo_realpath_from_path. [ 556.618055][ T5216] usb 1-1: device descriptor read/all, error -71 [ 556.964469][T11043] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1531'. [ 556.975967][ T5265] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 556.989480][ T5219] block nbd4: Receive control failed (result -32) [ 557.003006][ T5219] block nbd4: Receive control failed (result -32) [ 557.058057][T11027] block nbd4: shutting down sockets [ 557.160142][ T5265] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 557.178834][ T5265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 557.192596][ T5265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 557.209777][ T5265] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 557.223729][ T5265] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 557.232958][ T5265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.546363][ T5216] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 558.016450][ T5265] usb 2-1: config 0 descriptor?? [ 558.030127][T11034] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 558.199839][ T5216] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 558.236176][ T5216] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 558.284005][ T5216] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 558.305214][ T5216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.354923][T11052] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 558.383593][ T5216] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 558.688919][ T5265] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 558.957062][T11034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.968140][ T5265] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 558.976860][ T5265] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 558.985200][T11034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.997622][ T5265] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 559.056002][T11079] hub 9-0:1.0: USB hub found [ 559.061132][T11079] hub 9-0:1.0: 8 ports detected [ 560.064728][ T8] usb 1-1: USB disconnect, device number 56 [ 560.201736][ T5265] usb 2-1: USB disconnect, device number 52 [ 561.326047][ T5216] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 561.546143][ T5216] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 561.563037][ T5216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.574716][ T5216] usb 3-1: config 0 descriptor?? [ 561.636071][ T5265] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 561.796361][ T5216] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0e [ 561.874682][ T5216] hackrf 3-1:0.0: Could not detect board [ 562.523885][ T5216] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 562.546081][ T5265] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 562.555349][ T5265] usb 2-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 562.563700][ T5265] usb 2-1: Manufacturer: syz [ 562.575911][ T5216] usb 3-1: USB disconnect, device number 52 [ 562.591743][ T5265] usb 2-1: config 0 descriptor?? [ 567.380112][ T5265] gs_usb 2-1:0.0: Couldn't get device config: (err=-110) [ 567.385931][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.404537][T11128] hub 9-0:1.0: USB hub found [ 567.409694][T11128] hub 9-0:1.0: 8 ports detected [ 567.460064][ T5265] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 567.706645][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.816148][ T8936] usb 2-1: USB disconnect, device number 53 [ 568.305621][ T58] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 568.723930][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 568.770023][ T58] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.971196][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 569.704852][ T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 569.743053][ T58] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 569.837924][ T58] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 569.880765][ T58] usb 4-1: Product: syz [ 569.898939][ T58] usb 4-1: Manufacturer: syz [ 569.918199][ T58] usb 4-1: SerialNumber: syz [ 569.941838][ T58] usb 4-1: config 0 descriptor?? [ 569.952170][ T58] usb 4-1: NFC: intf ffff8880429c7000 id ffffffff8f0b50a0 [ 569.996287][ T8] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 570.196205][ T8936] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 570.219836][T11136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.237625][T11136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.254524][ T8] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 570.284374][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.334125][ T8] usb 2-1: config 0 descriptor?? [ 570.385898][ T8936] usb 3-1: device descriptor read/64, error -71 [ 570.513368][T11136] lo speed is unknown, defaulting to 1000 [ 570.558418][ T8] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0e [ 570.674103][T11167] hub 9-0:1.0: USB hub found [ 570.680330][T11167] hub 9-0:1.0: 8 ports detected [ 570.766227][ T8] hackrf 2-1:0.0: Could not detect board [ 570.773256][ T8] hackrf 2-1:0.0: probe with driver hackrf failed with error -71 [ 570.808783][ T8936] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 570.882374][ T8] usb 2-1: USB disconnect, device number 54 [ 571.046443][ T8936] usb 3-1: device descriptor read/64, error -71 [ 571.221087][ T8936] usb usb3-port1: attempt power cycle [ 571.644963][T11176] hub 9-0:1.0: USB hub found [ 571.650719][T11176] hub 9-0:1.0: 8 ports detected [ 572.451382][ T8936] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 572.528439][ T8936] usb 3-1: device descriptor read/8, error -71 [ 572.593655][ T5216] usb 4-1: USB disconnect, device number 44 [ 572.836140][ T8936] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 572.953613][ T8936] usb 3-1: device descriptor read/8, error -71 [ 573.076054][ T5264] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 573.106453][ T8936] usb usb3-port1: unable to enumerate USB device [ 573.296035][ T5264] usb 1-1: Using ep0 maxpacket: 8 [ 573.316379][ T5264] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.428639][ T5264] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 573.606912][ T5264] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 573.841677][ T5264] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 573.887800][ T5264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.931189][ T5264] usb 1-1: Manufacturer: ࠐ [ 573.954369][ T5264] usb 1-1: SerialNumber: syz [ 575.217410][ T5264] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 575.225532][ T5264] cdc_ncm 1-1:1.0: bind() failure [ 575.240906][ T5264] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 575.249483][ T5264] cdc_ncm 1-1:1.1: bind() failure [ 575.315028][ T5264] usb 1-1: USB disconnect, device number 57 [ 576.868444][T11222] hub 9-0:1.0: USB hub found [ 576.874192][T11222] hub 9-0:1.0: 8 ports detected [ 577.085981][ T5216] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 577.673464][T11225] No control pipe specified [ 577.748402][T11224] lo speed is unknown, defaulting to 1000 [ 577.803366][ T5216] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 577.831778][ T5216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 577.863876][ T5216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 577.898692][ T5216] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 577.935869][ T5216] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 577.959026][ T5216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.985144][ T5216] usb 3-1: config 0 descriptor?? [ 578.006128][ T5264] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 578.008053][T11218] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 578.249962][ T5264] usb 2-1: no configurations [ 579.046352][ T5264] usb 2-1: can't read configurations, error -22 [ 579.339364][ T5216] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 579.376698][ T5216] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 579.384967][ T5216] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 579.416278][ T5264] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 579.446154][ T5216] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 579.695596][ T5264] usb 2-1: no configurations [ 579.700969][ T5264] usb 2-1: can't read configurations, error -22 [ 580.067188][ T5264] usb usb2-port1: attempt power cycle [ 580.287742][T11218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.339867][T11218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.347042][ T8] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 580.583631][ T58] usb 3-1: USB disconnect, device number 57 [ 580.616220][ T5264] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 581.045366][T11264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1579'. [ 581.467207][ T8] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 581.473476][T11264] 8021q: VLANs not supported on ipvlan0 [ 581.480443][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.497202][ T8] usb 4-1: config 0 descriptor?? [ 581.507638][ T5264] usb 2-1: device descriptor read/8, error -71 [ 582.465893][ T5264] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 582.484371][T11270] hub 9-0:1.0: USB hub found [ 582.490967][T11270] hub 9-0:1.0: 8 ports detected [ 582.506901][ T5264] usb 2-1: device descriptor read/8, error -71 [ 582.586129][ T8] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0e [ 582.593307][ T8] hackrf 4-1:0.0: Could not detect board [ 582.633523][ T8] hackrf 4-1:0.0: probe with driver hackrf failed with error -71 [ 582.668910][ T8] usb 4-1: USB disconnect, device number 45 [ 582.706334][ T5264] usb usb2-port1: unable to enumerate USB device [ 583.006397][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 583.198783][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 583.226523][ T9] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 583.245712][ T9] usb 3-1: config 0 has no interface number 0 [ 583.262602][ T9] usb 3-1: too many endpoints for config 0 interface 48 altsetting 49: 55, using maximum allowed: 30 [ 583.311978][ T9] usb 3-1: config 0 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55 [ 583.325979][ T5216] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 583.337508][ T9] usb 3-1: config 0 interface 48 has no altsetting 0 [ 583.364581][ T9] usb 3-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 583.393200][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.413366][ T9] usb 3-1: config 0 descriptor?? [ 583.528930][ T5216] usb 2-1: Using ep0 maxpacket: 16 [ 583.554919][ T5216] usb 2-1: unable to get BOS descriptor or descriptor too short [ 583.588410][ T5216] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.642238][T11273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1590'. [ 583.642739][ T5216] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 583.663177][ T5216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.671723][ T5216] usb 2-1: Product: syz [ 583.676045][ T5216] usb 2-1: Manufacturer: syz [ 583.680735][ T5216] usb 2-1: SerialNumber: syz [ 583.750208][ T5216] cdc_ether 2-1:1.0: skipping garbage [ 583.758145][ T5216] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 583.775280][ T9] usb 3-1: string descriptor 0 read error: -71 [ 583.817185][ T9] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 583.880410][ T9] cxusb: set interface failed [ 583.911341][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 584.028818][ T9] dvb-usb: AVerMedia AVerTVHD Volar (A868R) error while loading driver (-22) [ 584.164992][ T9] dvb_usb_cxusb 3-1:0.48: probe with driver dvb_usb_cxusb failed with error -22 [ 584.200678][ T9] usb 3-1: USB disconnect, device number 58 [ 585.045559][T11306] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 585.348845][T11314] hub 9-0:1.0: USB hub found [ 585.354497][T11314] hub 9-0:1.0: 8 ports detected [ 586.149189][ T5216] usb 2-1: USB disconnect, device number 59 [ 586.435978][ T8] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 586.606085][ T8] usb 3-1: device descriptor read/64, error -71 [ 586.878578][ T8] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 586.900952][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 587.065989][ T8] usb 3-1: device descriptor read/64, error -71 [ 587.083658][ T9] usb 2-1: device descriptor read/64, error -71 [ 587.226698][ T8] usb usb3-port1: attempt power cycle [ 587.386504][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 587.580514][ T9] usb 2-1: device descriptor read/64, error -71 [ 587.665964][ T8] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 587.705456][ T8] usb 3-1: device descriptor read/8, error -71 [ 587.716253][ T9] usb usb2-port1: attempt power cycle [ 587.987319][ T8] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 588.136003][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 588.190111][ T8] usb 3-1: device descriptor read/8, error -71 [ 588.309025][ T9] usb 2-1: device descriptor read/8, error -71 [ 588.430234][ T8] usb usb3-port1: unable to enumerate USB device [ 588.852939][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 588.896449][ T9] usb 2-1: device descriptor read/8, error -71 [ 589.117753][ T9] usb usb2-port1: unable to enumerate USB device [ 590.524805][T11348] netlink: 'syz.0.1613': attribute type 21 has an invalid length. [ 590.535979][ T1628] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 590.876706][T11359] hub 9-0:1.0: USB hub found [ 590.882380][T11359] hub 9-0:1.0: 8 ports detected [ 591.046175][ T1628] usb 5-1: Using ep0 maxpacket: 32 [ 591.233286][ T1628] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 591.319172][ T1628] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 591.371439][ T1628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.556987][ T1628] usb 5-1: Product: syz [ 591.571290][ T1628] usb 5-1: Manufacturer: syz [ 591.580587][ T1628] usb 5-1: SerialNumber: syz [ 591.589178][ T1628] usb 5-1: config 0 descriptor?? [ 591.594649][T11341] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 591.632747][ T1628] hub 5-1:0.0: bad descriptor, ignoring hub [ 591.652449][ T1628] hub 5-1:0.0: probe with driver hub failed with error -5 [ 591.771352][T11370] hub 9-0:1.0: USB hub found [ 591.777758][T11370] hub 9-0:1.0: 8 ports detected [ 592.130619][ T1628] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input20 [ 592.543304][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 592.554660][ T1628] usb 5-1: USB disconnect, device number 63 [ 592.836053][ T5265] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 594.761020][ T5265] usb 4-1: device descriptor read/64, error -71 [ 594.893447][ T8] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 595.055827][ T5265] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 595.074024][ T8] usb 2-1: device descriptor read/64, error -71 [ 595.215831][ T5265] usb 4-1: device descriptor read/64, error -71 [ 595.336105][ T5265] usb usb4-port1: attempt power cycle [ 595.356274][ T8] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 595.487441][T11397] 9pnet_fd: Insufficient options for proto=fd [ 595.529584][ T8] usb 2-1: device descriptor read/64, error -71 [ 595.756660][T11403] hub 9-0:1.0: USB hub found [ 595.762384][T11403] hub 9-0:1.0: 8 ports detected [ 595.820951][ T5265] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 596.059223][ T5265] usb 4-1: device descriptor read/8, error -71 [ 596.464459][ T8] usb usb2-port1: attempt power cycle [ 596.908988][ T5265] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 596.957216][ T8] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 597.036086][ T8] usb 2-1: device descriptor read/8, error -71 [ 597.065965][ T5216] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 597.147293][ T5265] usb 4-1: device not accepting address 49, error -71 [ 597.197820][ T5265] usb usb4-port1: unable to enumerate USB device [ 597.310365][ T5216] usb 5-1: Using ep0 maxpacket: 16 [ 597.330763][ T5216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 597.356228][ T1628] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 597.363960][ T5216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 597.416811][ T5216] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9 [ 597.439810][ T5216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.491417][ T5216] usb 5-1: Product: syz [ 597.515692][ T5216] usb 5-1: Manufacturer: syz [ 597.526170][ T5216] usb 5-1: SerialNumber: syz [ 597.535370][ T5216] usb 5-1: config 0 descriptor?? [ 597.557960][ T5216] kvaser_usb 5-1:0.0: Cannot get usb endpoint(s) [ 597.575930][ T1628] usb 1-1: Using ep0 maxpacket: 16 [ 597.590893][ T1628] usb 1-1: unable to get BOS descriptor or descriptor too short [ 597.630635][ T1628] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.700515][ T1628] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 597.715993][ T1628] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.730648][ T1628] usb 1-1: Product: syz [ 597.735308][ T1628] usb 1-1: Manufacturer: syz [ 597.741182][ T1628] usb 1-1: SerialNumber: syz [ 597.754897][ T1628] cdc_ether 1-1:1.0: skipping garbage [ 597.788527][ T1628] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 597.840652][ T5216] usb 5-1: USB disconnect, device number 64 [ 598.036796][T11449] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1637'. [ 598.046412][T11449] netlink: 'syz.3.1637': attribute type 1 has an invalid length. [ 599.676106][ T1628] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 599.855882][ T1628] usb 5-1: device descriptor read/64, error -71 [ 599.862266][ T5216] usb 1-1: USB disconnect, device number 58 [ 600.035833][ T8] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 600.185834][ T1628] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 600.223164][T11480] FAULT_INJECTION: forcing a failure. [ 600.223164][T11480] name failslab, interval 1, probability 0, space 0, times 0 [ 600.245985][T11480] CPU: 0 UID: 0 PID: 11480 Comm: syz.0.1646 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0 [ 600.256458][T11480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 600.266535][T11480] Call Trace: [ 600.269808][T11480] [ 600.272735][T11480] dump_stack_lvl+0x241/0x360 [ 600.277415][T11480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 600.282606][T11480] ? __pfx__printk+0x10/0x10 [ 600.287274][T11480] ? fs_reclaim_acquire+0x93/0x140 [ 600.292382][T11480] ? __pfx___might_resched+0x10/0x10 [ 600.297666][T11480] should_fail_ex+0x3b0/0x4e0 [ 600.302343][T11480] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 600.308073][T11480] should_failslab+0xac/0x100 [ 600.312776][T11480] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 600.318517][T11480] __kmalloc_noprof+0xd8/0x400 [ 600.323278][T11480] ? kfree+0x4e/0x360 [ 600.327255][T11480] tomoyo_realpath_from_path+0xcf/0x5e0 [ 600.332803][T11480] tomoyo_path_number_perm+0x23a/0x880 [ 600.338256][T11480] ? tomoyo_path_number_perm+0x208/0x880 [ 600.343980][T11480] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 600.350345][T11480] ? __fget_files+0x29/0x470 [ 600.355053][T11480] ? __fget_files+0x3f6/0x470 [ 600.359756][T11480] ? __fget_files+0x29/0x470 [ 600.364375][T11480] security_file_ioctl+0x75/0xb0 [ 600.369517][T11480] __se_sys_ioctl+0x47/0x170 [ 600.374125][T11480] do_syscall_64+0xf3/0x230 [ 600.378661][T11480] ? clear_bhb_loop+0x35/0x90 [ 600.383362][T11480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.389274][T11480] RIP: 0033:0x7f65e4777299 [ 600.393701][T11480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.405958][ T1628] usb 5-1: device descriptor read/64, error -71 [ 600.413394][T11480] RSP: 002b:00007f65e5502048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.413450][T11480] RAX: ffffffffffffffda RBX: 00007f65e4905f80 RCX: 00007f65e4777299 [ 600.413470][T11480] RDX: 0000000020000100 RSI: 0000000000004601 RDI: 0000000000000003 [ 600.413482][T11480] RBP: 00007f65e55020a0 R08: 0000000000000000 R09: 0000000000000000 [ 600.413494][T11480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.459932][T11480] R13: 000000000000000b R14: 00007f65e4905f80 R15: 00007ffd067c9538 [ 600.467921][T11480] [ 600.495998][T11480] ERROR: Out of memory at tomoyo_realpath_from_path. [ 600.560765][ T8] usb 4-1: device descriptor read/64, error -71 [ 600.596169][ T1628] usb usb5-port1: attempt power cycle [ 600.714004][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1648'. [ 600.855882][ T8] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 601.002670][ T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 601.013940][ T8] usb 4-1: device descriptor read/64, error -71 [ 601.036419][ T1628] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 601.858867][ T1628] usb 5-1: device descriptor read/8, error -71 [ 601.936210][ T8] usb usb4-port1: attempt power cycle [ 601.986011][ T5216] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 602.004342][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.020279][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.031229][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 602.042970][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.080218][ T9] usb 2-1: config 0 descriptor?? [ 602.136213][ T1628] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 602.177080][ T1628] usb 5-1: device descriptor read/8, error -71 [ 602.185042][ T5216] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 602.213146][ T5216] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 602.246439][ T5216] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 602.258922][ T5216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.287120][T11492] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 602.314091][ T5216] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 602.326349][ T1628] usb usb5-port1: unable to enumerate USB device [ 602.356019][ T8] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 602.397202][ T8] usb 4-1: device descriptor read/8, error -71 [ 602.405140][T11503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.795489][ T8] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 607.859975][ T8] usb 4-1: device descriptor read/8, error -110 [ 607.945980][ T9] usbhid 2-1:0.0: can't add hid device: -32 [ 607.993672][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 608.179101][ T8] usb usb4-port1: unable to enumerate USB device [ 609.138588][ T9] usb 2-1: USB disconnect, device number 68 [ 609.148759][ T1628] usb 1-1: USB disconnect, device number 59 [ 609.230315][T11515] FAULT_INJECTION: forcing a failure. [ 609.230315][T11515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.273948][T11515] CPU: 1 UID: 0 PID: 11515 Comm: syz.3.1658 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0 [ 609.284418][T11515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 609.294498][T11515] Call Trace: [ 609.297790][T11515] [ 609.300760][T11515] dump_stack_lvl+0x241/0x360 [ 609.305431][T11515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 609.310627][T11515] ? __pfx__printk+0x10/0x10 [ 609.315209][T11515] ? __pfx_lock_release+0x10/0x10 [ 609.320233][T11515] should_fail_ex+0x3b0/0x4e0 [ 609.324913][T11515] _copy_from_user+0x2f/0xe0 [ 609.329496][T11515] copy_msghdr_from_user+0xae/0x680 [ 609.334692][T11515] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 609.340500][T11515] __sys_sendmsg+0x23d/0x3a0 [ 609.345085][T11515] ? __pfx___sys_sendmsg+0x10/0x10 [ 609.350185][T11515] ? vfs_write+0x7c4/0xc90 [ 609.354613][T11515] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 609.360935][T11515] ? do_syscall_64+0x100/0x230 [ 609.365692][T11515] ? do_syscall_64+0xb6/0x230 [ 609.370366][T11515] do_syscall_64+0xf3/0x230 [ 609.375122][T11515] ? clear_bhb_loop+0x35/0x90 [ 609.379840][T11515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.385732][T11515] RIP: 0033:0x7fda92577299 [ 609.390144][T11515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.409755][T11515] RSP: 002b:00007fda932ef048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.418166][T11515] RAX: ffffffffffffffda RBX: 00007fda92705f80 RCX: 00007fda92577299 [ 609.426143][T11515] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 609.434206][T11515] RBP: 00007fda932ef0a0 R08: 0000000000000000 R09: 0000000000000000 [ 609.442168][T11515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.450129][T11515] R13: 000000000000000b R14: 00007fda92705f80 R15: 00007ffdc3a85738 [ 609.458099][T11515] [ 609.616858][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1661'. [ 609.936063][ T1628] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 610.137578][ T1628] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 610.150267][ T1628] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.162195][ T1628] usb 1-1: config 0 descriptor?? [ 610.167585][ T5265] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 610.356530][ T5265] usb 3-1: no configurations [ 610.367703][ T5265] usb 3-1: can't read configurations, error -22 [ 610.392650][ T1628] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0e [ 610.412685][ T1628] hackrf 1-1:0.0: Could not detect board [ 610.419058][ T1628] hackrf 1-1:0.0: probe with driver hackrf failed with error -71 [ 610.430504][ T1628] usb 1-1: USB disconnect, device number 60 [ 610.455921][ T5216] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 610.575500][ T5265] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 610.657759][ T5216] usb 2-1: no configurations [ 610.662404][ T5216] usb 2-1: can't read configurations, error -22 [ 610.697439][T11551] FAULT_INJECTION: forcing a failure. [ 610.697439][T11551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.711438][T11551] CPU: 1 UID: 0 PID: 11551 Comm: syz.3.1669 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0 [ 610.721897][T11551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 610.731979][T11551] Call Trace: [ 610.735280][T11551] [ 610.738227][T11551] dump_stack_lvl+0x241/0x360 [ 610.742937][T11551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.748166][T11551] ? __pfx__printk+0x10/0x10 [ 610.752788][T11551] ? __pfx_lock_release+0x10/0x10 [ 610.758018][T11551] should_fail_ex+0x3b0/0x4e0 [ 610.762733][T11551] _copy_from_user+0x2f/0xe0 [ 610.767353][T11551] copy_msghdr_from_user+0xae/0x680 [ 610.772589][T11551] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 610.778432][T11551] __sys_sendmsg+0x23d/0x3a0 [ 610.783045][T11551] ? __pfx___sys_sendmsg+0x10/0x10 [ 610.788160][T11551] ? vfs_write+0x7c4/0xc90 [ 610.792604][T11551] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 610.798932][T11551] ? do_syscall_64+0x100/0x230 [ 610.803698][T11551] ? do_syscall_64+0xb6/0x230 [ 610.808372][T11551] do_syscall_64+0xf3/0x230 [ 610.812873][T11551] ? clear_bhb_loop+0x35/0x90 [ 610.817552][T11551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.823445][T11551] RIP: 0033:0x7fda92577299 [ 610.827858][T11551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.847462][T11551] RSP: 002b:00007fda932ef048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.855876][T11551] RAX: ffffffffffffffda RBX: 00007fda92705f80 RCX: 00007fda92577299 [ 610.863842][T11551] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 610.871812][T11551] RBP: 00007fda932ef0a0 R08: 0000000000000000 R09: 0000000000000000 [ 610.879780][T11551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.887748][T11551] R13: 000000000000000b R14: 00007fda92705f80 R15: 00007ffdc3a85738 [ 610.895734][T11551] [ 610.979467][T11555] netlink: 'syz.3.1671': attribute type 1 has an invalid length. [ 611.135942][T11557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.137300][ T5265] usb 3-1: no configurations [ 611.150600][ T5265] usb 3-1: can't read configurations, error -22 [ 611.157676][ T5265] usb usb3-port1: attempt power cycle [ 611.416412][ T5216] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 611.646110][T11560] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1673'. [ 611.756041][T11560] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1673'. [ 611.793139][ T5216] usb 2-1: no configurations [ 612.057091][ T5265] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 612.077022][ T5216] usb 2-1: can't read configurations, error -22 [ 612.499897][ T5216] usb usb2-port1: attempt power cycle [ 612.542572][ T5265] usb 3-1: no configurations [ 612.550463][ T5265] usb 3-1: can't read configurations, error -22 [ 612.621750][T11572] 9pnet_fd: Insufficient options for proto=fd [ 612.715941][ T5265] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 612.827401][T11580] hub 9-0:1.0: USB hub found [ 612.833144][T11580] hub 9-0:1.0: 8 ports detected [ 612.955846][ T5216] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 613.487916][ T5216] usb 2-1: no configurations [ 613.491114][T11581] FAULT_INJECTION: forcing a failure. [ 613.491114][T11581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.492868][ T5216] usb 2-1: can't read configurations, error -22 [ 613.554059][ T5265] usb 3-1: device descriptor read/8, error -71 [ 613.574419][T11581] CPU: 0 UID: 0 PID: 11581 Comm: syz.0.1679 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0 [ 613.584866][T11581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 613.594914][T11581] Call Trace: [ 613.598213][T11581] [ 613.601128][T11581] dump_stack_lvl+0x241/0x360 [ 613.605811][T11581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 613.611023][T11581] ? __pfx__printk+0x10/0x10 [ 613.615633][T11581] ? scsi_block_when_processing_errors+0x295/0x360 [ 613.622167][T11581] ? __pfx_lock_release+0x10/0x10 [ 613.627228][T11581] should_fail_ex+0x3b0/0x4e0 [ 613.631942][T11581] _copy_from_user+0x2f/0xe0 [ 613.636562][T11581] sg_write+0x359/0xf10 [ 613.640750][T11581] ? __pfx_sg_write+0x10/0x10 [ 613.645479][T11581] ? bpf_lsm_file_permission+0x9/0x10 [ 613.650882][T11581] ? security_file_permission+0x7f/0xa0 [ 613.656457][T11581] ? rw_verify_area+0x1d2/0x6b0 [ 613.661336][T11581] vfs_writev+0x5af/0xbb0 [ 613.665700][T11581] ? __pfx_sg_write+0x10/0x10 [ 613.670397][T11581] ? __pfx_vfs_writev+0x10/0x10 [ 613.675267][T11581] ? vfs_write+0x7c4/0xc90 [ 613.679712][T11581] ? __fget_files+0x29/0x470 [ 613.684334][T11581] do_writev+0x1b1/0x350 [ 613.686203][ T5265] usb usb3-port1: unable to enumerate USB device [ 613.688572][T11581] ? __pfx_do_writev+0x10/0x10 [ 613.699658][T11581] ? do_syscall_64+0x100/0x230 [ 613.703982][T11586] sch_tbf: burst 6 is lower than device lo mtu (65550) ! [ 613.704423][T11581] ? do_syscall_64+0xb6/0x230 [ 613.715965][ T5216] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 613.716081][T11581] do_syscall_64+0xf3/0x230 [ 613.728151][T11581] ? clear_bhb_loop+0x35/0x90 [ 613.732845][T11581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.738736][T11581] RIP: 0033:0x7f65e4777299 [ 613.743155][T11581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.758153][ T5216] usb 2-1: no configurations [ 613.762828][T11581] RSP: 002b:00007f65e54e1048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 613.762858][T11581] RAX: ffffffffffffffda RBX: 00007f65e4906058 RCX: 00007f65e4777299 [ 613.762872][T11581] RDX: 0000000000000002 RSI: 0000000020000400 RDI: 0000000000000005 [ 613.791939][T11581] RBP: 00007f65e54e10a0 R08: 0000000000000000 R09: 0000000000000000 [ 613.799905][T11581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.807877][T11581] R13: 000000000000006e R14: 00007f65e4906058 R15: 00007ffd067c9538 [ 613.815857][T11581] [ 613.818939][ C0] vkms_vblank_simulate: vblank timer overrun [ 613.834318][ T5216] usb 2-1: can't read configurations, error -22 [ 613.863172][ T5216] usb usb2-port1: unable to enumerate USB device [ 614.224397][T11596] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1685'. [ 614.234157][T11596] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1685'. [ 614.351752][T11598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.680748][ T5265] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 615.890119][T11606] fuse: Unknown parameter '0xffffffffffffffff' [ 615.919104][ T29] audit: type=1326 audit(615.885:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11601 comm="syz.4.1687" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0f5d77299 code=0x0 [ 615.927642][ T5265] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 615.939475][ C0] vkms_vblank_simulate: vblank timer overrun [ 615.956079][ T5265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.977584][ T5265] usb 4-1: config 0 descriptor?? [ 616.192358][ T5265] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0e [ 616.200238][ T5265] hackrf 4-1:0.0: Could not detect board [ 616.215678][ T5265] hackrf 4-1:0.0: probe with driver hackrf failed with error -71 [ 616.243448][ T5265] usb 4-1: USB disconnect, device number 54 [ 616.335945][ T5216] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 616.526617][ T5216] usb 1-1: no configurations [ 616.531268][ T5216] usb 1-1: can't read configurations, error -22 [ 616.695900][ T5216] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 616.886783][ T5216] usb 1-1: no configurations [ 616.894163][ T5216] usb 1-1: can't read configurations, error -22 [ 616.897666][T11638] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 616.897666][T11638] program syz.2.1699 not setting count and/or reply_len properly [ 616.912017][ T5216] usb usb1-port1: attempt power cycle [ 616.955848][ T8936] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 617.015841][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 617.115988][ T8936] usb 5-1: device descriptor read/64, error -71 [ 617.200080][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 617.213543][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 617.226113][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.245854][ T9] usb 4-1: Product: syz [ 617.250017][ T9] usb 4-1: Manufacturer: syz [ 617.264434][ T9] usb 4-1: SerialNumber: syz [ 617.281854][ T9] usb 4-1: config 0 descriptor?? [ 617.336116][ T5216] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 617.367721][ T5216] usb 1-1: no configurations [ 617.374456][ T5216] usb 1-1: can't read configurations, error -22 [ 617.405992][ T8936] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 617.414406][ T8] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 617.502361][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 617.526988][ T5216] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 617.576151][ T8936] usb 5-1: device descriptor read/64, error -71 [ 617.584059][ T5216] usb 1-1: no configurations [ 617.595144][ T5216] usb 1-1: can't read configurations, error -22 [ 617.601939][ T5216] usb usb1-port1: unable to enumerate USB device [ 617.621649][ T8] usb 2-1: no configurations [ 617.633546][ T8] usb 2-1: can't read configurations, error -22 [ 617.719831][ T8936] usb usb5-port1: attempt power cycle [ 617.796007][ T8] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 617.878585][T11645] tipc: Failed to remove unknown binding: 66,1,1/0:3779529048/3779529050 [ 617.889033][T11645] tipc: Failed to remove unknown binding: 66,1,1/0:3779529048/3779529050 [ 618.023431][ T8] usb 2-1: no configurations [ 618.029627][ T8] usb 2-1: can't read configurations, error -22 [ 618.037559][ T8] usb usb2-port1: attempt power cycle [ 618.266173][ T8936] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 618.399069][ T8936] usb 5-1: device descriptor read/8, error -71 [ 618.688178][ T8] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 618.737198][ T8936] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 618.800311][ T8] usb 2-1: no configurations [ 618.815353][ T8] usb 2-1: can't read configurations, error -22 [ 618.836598][ T8936] usb 5-1: device descriptor read/8, error -71 [ 618.961012][ T8936] usb usb5-port1: unable to enumerate USB device [ 618.977419][ T8] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 619.027031][ T8] usb 2-1: no configurations [ 619.031687][ T8] usb 2-1: can't read configurations, error -22 [ 619.046259][ T8] usb usb2-port1: unable to enumerate USB device [ 619.199806][T11656] 9pnet_fd: Insufficient options for proto=fd [ 620.088152][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 620.206089][ T8] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 620.253682][T11673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1710'. [ 620.417615][ T9] usb 4-1: USB disconnect, device number 55 [ 620.438030][ T8] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 620.453634][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.465063][T11681] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 620.465063][T11681] program syz.1.1711 not setting count and/or reply_len properly [ 620.498356][ T8] usb 5-1: config 0 descriptor?? [ 620.717961][ T8] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0e [ 620.736766][ T8] hackrf 5-1:0.0: Could not detect board [ 620.752240][ T8] hackrf 5-1:0.0: probe with driver hackrf failed with error -71 [ 620.772134][ T8] usb 5-1: USB disconnect, device number 73 [ 620.845868][ T8936] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 621.028401][ T8936] usb 1-1: no configurations [ 621.041926][ T8936] usb 1-1: can't read configurations, error -22 [ 621.215937][ T8936] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 621.347146][ T8] kernel write not supported for file /uhid (pid: 8 comm: kworker/0:0) [ 621.416824][ T8936] usb 1-1: no configurations [ 621.421811][ T8936] usb 1-1: can't read configurations, error -22 [ 621.439819][ T8936] usb usb1-port1: attempt power cycle [ 621.586060][ T5216] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 621.765851][ T5216] usb 5-1: Using ep0 maxpacket: 8 [ 621.772365][ T5216] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 621.780429][ T5216] usb 5-1: config 0 has no interface number 0 [ 621.786795][ T5216] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 621.797753][ T5216] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 621.806846][ T5216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.822086][ T5216] usb 5-1: config 0 descriptor?? [ 621.830258][ T5216] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 621.926145][ T8936] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 621.965851][ T8] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 621.975052][ T8936] usb 1-1: no configurations [ 621.979786][ T8936] usb 1-1: can't read configurations, error -22 [ 622.156036][ T8936] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 622.165442][ T8] usb 2-1: no configurations [ 622.170143][ T8] usb 2-1: can't read configurations, error -22 [ 622.207225][ T8936] usb 1-1: no configurations [ 622.211839][ T8936] usb 1-1: can't read configurations, error -22 [ 622.218646][ T8936] usb usb1-port1: unable to enumerate USB device [ 622.335896][ T8] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 622.531346][ T8] usb 2-1: no configurations [ 622.537026][ T8] usb 2-1: can't read configurations, error -22 [ 622.543685][ T8] usb usb2-port1: attempt power cycle [ 622.975849][ T8] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 623.007533][ T8] usb 2-1: no configurations [ 623.012377][ T8] usb 2-1: can't read configurations, error -22 [ 623.175870][ T8] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 623.211272][ T8] usb 2-1: no configurations [ 623.217894][ T8] usb 2-1: can't read configurations, error -22 [ 623.225131][ T8] usb usb2-port1: unable to enumerate USB device [ 623.623147][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1727'. [ 623.789441][T11724] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 623.789441][T11724] program syz.0.1729 not setting count and/or reply_len properly [ 623.965927][ T8] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 624.158236][ T8] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 624.175555][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.246226][ T8] usb 4-1: config 0 descriptor?? [ 624.323650][ T5216] usb 5-1: USB disconnect, device number 74 [ 624.336719][ T5216] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 624.391442][T11726] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1730'. [ 624.404329][T11726] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1730'. [ 624.457389][ T8] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0e [ 624.470526][ T8] hackrf 4-1:0.0: Could not detect board [ 624.484457][ T8] hackrf 4-1:0.0: probe with driver hackrf failed with error -71 [ 624.506055][ T8] usb 4-1: USB disconnect, device number 56 [ 624.731138][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.739327][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.262615][ T29] audit: type=1326 audit(625.215:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11736 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e4777299 code=0x7ffc0000 [ 625.311518][ T29] audit: type=1326 audit(625.215:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11736 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e4777299 code=0x7ffc0000 [ 625.347079][T11744] sctp: [Deprecated]: syz.1.1735 (pid 11744) Use of int in max_burst socket option. [ 625.347079][T11744] Use struct sctp_assoc_value instead [ 625.373062][ T29] audit: type=1326 audit(625.215:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11736 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f65e4777299 code=0x7ffc0000 [ 625.421230][ T29] audit: type=1326 audit(625.215:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11736 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e4777299 code=0x7ffc0000 [ 625.475689][ T29] audit: type=1326 audit(625.215:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11736 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f65e4777299 code=0x7ffc0000 [ 625.559803][ T29] audit: type=1326 audit(625.215:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11736 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e4777299 code=0x7ffc0000 [ 625.581796][ T29] audit: type=1326 audit(625.215:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11736 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e4777299 code=0x7ffc0000 [ 625.602992][ T29] audit: type=1326 audit(625.215:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11736 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f65e4777299 code=0x7ffc0000 [ 625.799517][ T29] audit: type=1326 audit(625.215:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11736 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e4777299 code=0x7ffc0000 [ 625.960824][T11757] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1738'. [ 626.364605][ T29] audit: type=1326 audit(625.215:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11736 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e4777299 code=0x7ffc0000 [ 626.409066][T11757] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1738'. [ 626.628240][T11764] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1741'. [ 731.945770][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 731.952748][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11766/1:b..l [ 731.961234][ C1] rcu: (detected by 1, t=10502 jiffies, g=53909, q=219 ncpus=2) [ 731.968936][ C1] task:syz.1.1740 state:R running task stack:25632 pid:11766 tgid:11759 ppid:6007 flags:0x00004002 [ 731.981824][ C1] Call Trace: [ 731.985097][ C1] [ 731.988018][ C1] __schedule+0x17ae/0x4a10 [ 731.992527][ C1] ? filemap_map_pages+0x1707/0x1e70 [ 731.997808][ C1] ? __pfx___schedule+0x10/0x10 [ 732.002654][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 732.008624][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 732.013815][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 732.019087][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 732.024188][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 732.029896][ C1] irqentry_exit+0x5e/0x90 [ 732.034295][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 732.040261][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 732.045533][ C1] Code: 2b 00 74 08 4c 89 f7 e8 8a ea 87 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 732.065131][ C1] RSP: 0018:ffffc90003bb7480 EFLAGS: 00000206 [ 732.071186][ C1] RAX: 0000000000000001 RBX: 1ffff92000776e9c RCX: f3c139410e38e200 [ 732.079313][ C1] RDX: dffffc0000000000 RSI: ffffffff8beae720 RDI: ffffffff8c3f9560 [ 732.087293][ C1] RBP: ffffc90003bb75c8 R08: ffffffff934e7807 R09: 1ffffffff269cf00 [ 732.095265][ C1] R10: dffffc0000000000 R11: fffffbfff269cf01 R12: 1ffff92000776e98 [ 732.103226][ C1] R13: dffffc0000000000 R14: ffffc90003bb74e0 R15: 0000000000000246 [ 732.111203][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 732.116227][ C1] __pte_offset_map+0x9e/0x380 [ 732.120972][ C1] ? __pte_offset_map+0x82/0x380 [ 732.125891][ C1] ? __pfx___pte_offset_map+0x10/0x10 [ 732.131249][ C1] __pte_offset_map_lock+0xc7/0x300 [ 732.136432][ C1] ? follow_page_pte+0xf33/0x1ee0 [ 732.141439][ C1] ? __pfx_lock_release+0x10/0x10 [ 732.146447][ C1] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 732.152239][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 732.157421][ C1] ? folio_mark_accessed+0x6f6/0x11b0 [ 732.162811][ C1] follow_page_pte+0x11b/0x1ee0 [ 732.167653][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 732.172929][ C1] follow_page_mask+0x739/0x2f90 [ 732.177858][ C1] ? __pfx_follow_page_mask+0x10/0x10 [ 732.183212][ C1] ? __pfx_find_vma+0x10/0x10 [ 732.187874][ C1] ? vma_is_secretmem+0xd/0x50 [ 732.192618][ C1] ? check_vma_flags+0x500/0x5a0 [ 732.197543][ C1] __get_user_pages+0x67b/0x16a0 [ 732.202496][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 732.207866][ C1] populate_vma_page_range+0x264/0x330 [ 732.213318][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 732.219289][ C1] ? userfaultfd_unmap_complete+0x30c/0x360 [ 732.225168][ C1] ? do_mmap+0x961/0x1010 [ 732.229485][ C1] __mm_populate+0x27a/0x460 [ 732.234062][ C1] ? __pfx___mm_populate+0x10/0x10 [ 732.239161][ C1] vm_mmap_pgoff+0x2c3/0x3d0 [ 732.243741][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 732.248844][ C1] ? __fget_files+0x29/0x470 [ 732.253423][ C1] ? __fget_files+0x3f6/0x470 [ 732.258089][ C1] ksys_mmap_pgoff+0x4f1/0x720 [ 732.262839][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 732.267591][ C1] do_syscall_64+0xf3/0x230 [ 732.272077][ C1] ? clear_bhb_loop+0x35/0x90 [ 732.276739][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.282618][ C1] RIP: 0033:0x7f6ad4577299 [ 732.287017][ C1] RSP: 002b:00007f6ad5298048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 732.295412][ C1] RAX: ffffffffffffffda RBX: 00007f6ad4706058 RCX: 00007f6ad4577299 [ 732.303376][ C1] RDX: 000000000280000b RSI: 0000000000b36000 RDI: 0000000020000000 [ 732.311334][ C1] RBP: 00007f6ad45e48e6 R08: 0000000000000005 R09: 0000000000000000 [ 732.319295][ C1] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 732.327248][ C1] R13: 000000000000006e R14: 00007f6ad4706058 R15: 00007fff647dc2c8 [ 732.335213][ C1] [ 732.338217][ C1] rcu: rcu_preempt kthread starved for 10475 jiffies! g53909 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 732.349396][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 732.359349][ C1] rcu: RCU grace-period kthread stack dump: [ 732.365214][ C1] task:rcu_preempt state:R running task stack:25816 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 732.376928][ C1] Call Trace: [ 732.380191][ C1] [ 732.383110][ C1] __schedule+0x17ae/0x4a10 [ 732.387612][ C1] ? __pfx___schedule+0x10/0x10 [ 732.392444][ C1] ? __pfx_lock_release+0x10/0x10 [ 732.397452][ C1] ? __asan_memset+0x23/0x50 [ 732.402025][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 732.407820][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 732.414142][ C1] ? schedule+0x90/0x320 [ 732.418372][ C1] schedule+0x14b/0x320 [ 732.422510][ C1] schedule_timeout+0x1be/0x310 [ 732.427357][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 732.432716][ C1] ? __pfx_process_timeout+0x10/0x10 [ 732.437993][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 732.443526][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 732.448361][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 732.453546][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 732.459597][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 732.464866][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 732.470749][ C1] ? finish_swait+0xd4/0x1e0 [ 732.475329][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 732.479906][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 732.485089][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 732.490969][ C1] ? __kthread_parkme+0x169/0x1d0 [ 732.495987][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 732.501170][ C1] kthread+0x2f0/0x390 [ 732.505221][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 732.510490][ C1] ? __pfx_kthread+0x10/0x10 [ 732.515066][ C1] ret_from_fork+0x4b/0x80 [ 732.519478][ C1] ? __pfx_kthread+0x10/0x10 [ 732.524054][ C1] ret_from_fork_asm+0x1a/0x30 [ 732.528813][ C1] [ 732.531817][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 732.538118][ C1] Sending NMI from CPU 1 to CPUs 0: [ 732.543329][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30